Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-34986 (GCVE-0-2026-34986)
Vulnerability from cvelistv5 – Published: 2026-04-06 16:22 – Updated: 2026-06-30 12:05
VLAI
EPSS
Title
Go JOSE affect by a panic in JWE decryption
Summary
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
110 references
Impacted products
103 products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-34986",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-07T14:21:42.477191Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-07T14:21:54.041Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"product": "Logging Subsystem for Red Hat OpenShift 6.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.3::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.3.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.4.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.5.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.6.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
],
"defaultStatus": "affected",
"product": "OpenShift API for Data Protection 1.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.27::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Dev Spaces 3.27",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.18::el8"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift GitOps 1.18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1.21::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Pipelines 1.21",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1.20::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Pipelines 1.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift distributed tracing 3.9.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.14::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.17::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.17",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.7::el9"
],
"defaultStatus": "affected",
"product": "multicluster engine for Kubernetes 2.7",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el8"
],
"defaultStatus": "affected",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:kernel_module_management:2"
],
"defaultStatus": "affected",
"product": "Kernel Module Management Operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2"
],
"defaultStatus": "affected",
"product": "Migration Toolkit for Virtualization",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "affected",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "affected",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "unaffected",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:kueue_operator:1"
],
"defaultStatus": "unaffected",
"product": "Red Hat Build of Kueue",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
}
],
"datePublic": "2026-04-06T16:22:45.353Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-30T12:05:51.082Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"name": "RHBZ#2455470",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17789"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20569"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19719"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27856"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17040"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16696"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22937"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22450"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19017"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25252"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25248"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25250"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:32991"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19721"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20607"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19720"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26054"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20609"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19186"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23228"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19353"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22714"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19173"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26636"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22423"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22347"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21769"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23345"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25127"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13829"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13791"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24977"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17598"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27001"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17448"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27004"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20041"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17468"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25187"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21709"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23241"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20034"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17474"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25206"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24484"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21932"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21931"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11688"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9448"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9453"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17550"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17547"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12279"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12277"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11856"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22629"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21017"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24853"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22465"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11916"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22840"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23361"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11996"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10130"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24475"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24482"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24479"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24477"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24471"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12116"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19099"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19108"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28198"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17459"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17458"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11512"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17123"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22258"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17121"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22260"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18584"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18585"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:17789: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:27856: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:17040: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:16696: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19017: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:25252: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:25248: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:25250: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:32991: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:26054: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:10135: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19186: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19173: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26636: Custom Metric Autoscaler 2.19"
},
{
"lang": "en",
"value": "RHSA-2026:26585: Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:22423: Multicluster Global Hub 1.3.4"
},
{
"lang": "en",
"value": "RHSA-2026:22347: Multicluster Global Hub 1.4.5"
},
{
"lang": "en",
"value": "RHSA-2026:21769: Multicluster Global Hub 1.5.4"
},
{
"lang": "en",
"value": "RHSA-2026:23345: Multicluster Global Hub 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:29854: OpenShift API for Data Protection 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:26568: OpenShift API for Data Protection 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:11070: Red Hat Advanced Cluster Security for Kubernetes 4.8"
},
{
"lang": "en",
"value": "RHSA-2026:11217: Red Hat Advanced Cluster Security for Kubernetes 4.8"
},
{
"lang": "en",
"value": "RHSA-2026:13791: Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:27001: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:17448: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:27004: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:21703: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:25194: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:25187: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:21709: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:23241: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:25206: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
},
{
"lang": "en",
"value": "RHSA-2026:20946: Red Hat OpenShift GitOps 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:24484: Red Hat OpenShift Pipelines 1.21"
},
{
"lang": "en",
"value": "RHSA-2026:21932: Red Hat OpenShift Pipelines 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:21931: Red Hat OpenShift Pipelines 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:9448: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:9453: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:9388: Red Hat OpenShift distributed tracing 3.9.3"
},
{
"lang": "en",
"value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3"
},
{
"lang": "en",
"value": "RHSA-2026:17550: Red Hat Openshift Data Foundation 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:17547: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:12279: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:12277: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:11856: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:22629: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:21017: Red Hat Quay 3.14"
},
{
"lang": "en",
"value": "RHSA-2026:24853: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:19375: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:22465: Red Hat Quay 3.17"
},
{
"lang": "en",
"value": "RHSA-2026:11916: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:22840: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:23361: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:11996: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:10125: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:10130: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24475: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24482: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24479: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24477: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24471: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:12116: multicluster engine for Kubernetes 2.10"
},
{
"lang": "en",
"value": "RHSA-2026:19099: multicluster engine for Kubernetes 2.10"
},
{
"lang": "en",
"value": "RHSA-2026:19108: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:28198: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:17459: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:17458: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:11512: multicluster engine for Kubernetes 2.7"
},
{
"lang": "en",
"value": "RHSA-2026:17123: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:22258: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:17121: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:22260: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:18584: multicluster engine for Kubernetes 2.9"
},
{
"lang": "en",
"value": "RHSA-2026:18585: multicluster engine for Kubernetes 2.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-04-06T17:01:34.639Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-04-06T16:22:45.353Z",
"value": "Made public."
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "go-jose",
"vendor": "go-jose",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.0.0, \u003c 4.1.4"
},
{
"status": "affected",
"version": "\u003c 3.0.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-248",
"description": "CWE-248: Uncaught Exception",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-06T16:22:45.353Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"name": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"tags": [
"x_refsource_MISC"
],
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"source": {
"advisory": "GHSA-78h2-9frx-2jm8",
"discovery": "UNKNOWN"
},
"title": "Go JOSE affect by a panic in JWE decryption"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-34986",
"datePublished": "2026-04-06T16:22:45.353Z",
"dateReserved": "2026-03-31T19:38:31.617Z",
"dateUpdated": "2026-06-30T12:05:51.082Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-34986",
"date": "2026-06-29",
"epss": "0.00283",
"percentile": "0.19979"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-34986\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-04-06T17:17:11.870\",\"lastModified\":\"2026-06-30T03:19:00.233\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"go-jose\",\"product\":\"go-jose\",\"versions\":[{\"version\":\"\u003e= 4.0.0, \u003c 4.1.4\",\"status\":\"affected\"},{\"version\":\"\u003c 3.0.5\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.3.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.4.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.6.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.27\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.18::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Pipelines 1.21\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1.21::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Pipelines 1.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.14::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.17\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.17::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.7\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.7::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Kernel Module Management Operator for Red Hat Openshift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:kernel_module_management:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Kueue\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:kueue_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-07T14:21:42.477191Z\",\"id\":\"CVE-2026-34986\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-248\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-131\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:go-jose_project:go-jose:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.0.0\",\"versionEndExcluding\":\"3.0.5\",\"matchCriteriaId\":\"C8F16FC9-40BA-4C17-9ABD-614143E86BFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:go-jose_project:go-jose:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndExcluding\":\"4.1.4\",\"matchCriteriaId\":\"DC2FEC8C-1ECF-40EA-A074-86B4C7688B60\"}]}]}],\"references\":[{\"url\":\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Product\",\"Technical Description\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10125\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10130\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10175\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11070\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11217\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11512\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11688\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11856\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11916\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11996\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12116\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12277\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12279\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13791\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13829\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16696\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17040\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17121\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17123\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17448\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17458\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17459\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17468\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17474\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17547\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17550\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17598\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17789\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18584\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19017\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19099\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19108\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19173\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19186\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19353\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19375\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19719\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19720\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19721\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20034\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20041\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20569\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20607\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20609\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21017\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21709\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21769\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21931\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21932\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22258\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22260\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22347\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22423\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22450\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22465\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22629\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22714\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22840\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22937\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23228\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23241\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23345\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23361\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24471\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24475\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24477\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24479\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24482\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24484\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24853\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24977\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25127\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25187\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25206\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25248\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25250\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25252\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26054\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26636\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27001\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27004\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27044\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27063\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27856\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28198\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29854\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30650\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:32991\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8490\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8491\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8493\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9385\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9388\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9448\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9453\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-34986\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2455470\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-34986\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-07T14:21:42.477191Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-07T14:21:49.130Z\"}}], \"cna\": {\"title\": \"Go JOSE affect by a panic in JWE decryption\", \"source\": {\"advisory\": \"GHSA-78h2-9frx-2jm8\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"go-jose\", \"product\": \"go-jose\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 4.0.0, \u003c 4.1.4\"}, {\"status\": \"affected\", \"version\": \"\u003c 3.0.5\"}]}], \"references\": [{\"url\": \"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\", \"name\": \"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants\", \"name\": \"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-248\", \"description\": \"CWE-248: Uncaught Exception\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-04-06T16:22:45.353Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-34986\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-07T14:21:54.041Z\", \"dateReserved\": \"2026-03-31T19:38:31.617Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-04-06T16:22:45.353Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:27856
Vulnerability from csaf_redhat - Published: 2026-06-22 11:36 - Updated: 2026-06-30 12:22Summary
Red Hat Security Advisory: osbuild-composer security update
Severity
Important
Notes
Topic: An update for osbuild-composer is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.
Security Fix(es):
* google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
16 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for osbuild-composer is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.\n\nSecurity Fix(es):\n\n* google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:27856",
"url": "https://access.redhat.com/errata/RHSA-2026:27856"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27856.json"
}
],
"title": "Red Hat Security Advisory: osbuild-composer security update",
"tracking": {
"current_release_date": "2026-06-30T12:22:09+00:00",
"generator": {
"date": "2026-06-30T12:22:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:27856",
"initial_release_date": "2026-06-22T11:36:22+00:00",
"revision_history": [
{
"date": "2026-06-22T11:36:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-22T11:36:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T12:22:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "osbuild-composer-0:134.1-9.el10_0.src",
"product": {
"name": "osbuild-composer-0:134.1-9.el10_0.src",
"product_id": "osbuild-composer-0:134.1-9.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer@134.1-9.el10_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "osbuild-composer-0:134.1-9.el10_0.aarch64",
"product": {
"name": "osbuild-composer-0:134.1-9.el10_0.aarch64",
"product_id": "osbuild-composer-0:134.1-9.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer@134.1-9.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"product": {
"name": "osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"product_id": "osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core@134.1-9.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"product": {
"name": "osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"product_id": "osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker@134.1-9.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"product": {
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"product_id": "osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debugsource@134.1-9.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"product": {
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"product_id": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core-debuginfo@134.1-9.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"product": {
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"product_id": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-tests-debuginfo@134.1-9.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"product": {
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"product_id": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker-debuginfo@134.1-9.el10_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "osbuild-composer-0:134.1-9.el10_0.ppc64le",
"product": {
"name": "osbuild-composer-0:134.1-9.el10_0.ppc64le",
"product_id": "osbuild-composer-0:134.1-9.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer@134.1-9.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"product": {
"name": "osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"product_id": "osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core@134.1-9.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"product": {
"name": "osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"product_id": "osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker@134.1-9.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"product": {
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"product_id": "osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debugsource@134.1-9.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"product": {
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"product_id": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core-debuginfo@134.1-9.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"product": {
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"product_id": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-tests-debuginfo@134.1-9.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"product": {
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"product_id": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker-debuginfo@134.1-9.el10_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "osbuild-composer-0:134.1-9.el10_0.s390x",
"product": {
"name": "osbuild-composer-0:134.1-9.el10_0.s390x",
"product_id": "osbuild-composer-0:134.1-9.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer@134.1-9.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-0:134.1-9.el10_0.s390x",
"product": {
"name": "osbuild-composer-core-0:134.1-9.el10_0.s390x",
"product_id": "osbuild-composer-core-0:134.1-9.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core@134.1-9.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"product": {
"name": "osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"product_id": "osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker@134.1-9.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"product": {
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"product_id": "osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debugsource@134.1-9.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"product": {
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"product_id": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core-debuginfo@134.1-9.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"product": {
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"product_id": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-tests-debuginfo@134.1-9.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"product": {
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"product_id": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker-debuginfo@134.1-9.el10_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "osbuild-composer-0:134.1-9.el10_0.x86_64",
"product": {
"name": "osbuild-composer-0:134.1-9.el10_0.x86_64",
"product_id": "osbuild-composer-0:134.1-9.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer@134.1-9.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"product": {
"name": "osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"product_id": "osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core@134.1-9.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"product": {
"name": "osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"product_id": "osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker@134.1-9.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"product": {
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"product_id": "osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debugsource@134.1-9.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"product": {
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"product_id": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core-debuginfo@134.1-9.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"product": {
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"product_id": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-tests-debuginfo@134.1-9.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64",
"product": {
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64",
"product_id": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker-debuginfo@134.1-9.el10_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-0:134.1-9.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64"
},
"product_reference": "osbuild-composer-0:134.1-9.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-0:134.1-9.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le"
},
"product_reference": "osbuild-composer-0:134.1-9.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-0:134.1-9.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x"
},
"product_reference": "osbuild-composer-0:134.1-9.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-0:134.1-9.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src"
},
"product_reference": "osbuild-composer-0:134.1-9.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-0:134.1-9.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64"
},
"product_reference": "osbuild-composer-0:134.1-9.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-0:134.1-9.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64"
},
"product_reference": "osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-0:134.1-9.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le"
},
"product_reference": "osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-0:134.1-9.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x"
},
"product_reference": "osbuild-composer-core-0:134.1-9.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-0:134.1-9.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64"
},
"product_reference": "osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64"
},
"product_reference": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le"
},
"product_reference": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x"
},
"product_reference": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64"
},
"product_reference": "osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64"
},
"product_reference": "osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le"
},
"product_reference": "osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x"
},
"product_reference": "osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64"
},
"product_reference": "osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64"
},
"product_reference": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le"
},
"product_reference": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x"
},
"product_reference": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64"
},
"product_reference": "osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-0:134.1-9.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64"
},
"product_reference": "osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-0:134.1-9.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le"
},
"product_reference": "osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-0:134.1-9.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x"
},
"product_reference": "osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-0:134.1-9.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64"
},
"product_reference": "osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64"
},
"product_reference": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le"
},
"product_reference": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x"
},
"product_reference": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64"
},
"product_reference": "osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T11:36:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27856"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T11:36:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27856"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.src",
"AppStream-10.0.Z.E2S:osbuild-composer-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-core-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-debugsource-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-tests-debuginfo-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-0:134.1-9.el10_0.x86_64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.aarch64",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.s390x",
"AppStream-10.0.Z.E2S:osbuild-composer-worker-debuginfo-0:134.1-9.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:28198
Vulnerability from csaf_redhat - Published: 2026-06-23 10:55 - Updated: 2026-06-30 11:45Summary
Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12
Severity
Important
Notes
Topic: Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images.
Details: Assisted Installer RHEL 8 integrates components for the general multicluster engine
for Kubernetes 2.6.12 release that simplify the process of deploying OpenShift Container
Platform clusters.
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters, or to import existing Kubernetes-based clusters for management.
After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64 | — |
Vendor Fix
fix
|
Known not affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64 | — |
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64 | — |
Workaround
|
Threats
Impact
Important
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images.",
"title": "Topic"
},
{
"category": "general",
"text": "Assisted Installer RHEL 8 integrates components for the general multicluster engine\nfor Kubernetes 2.6.12 release that simplify the process of deploying OpenShift Container\nPlatform clusters.\n\nThe multicluster engine for Kubernetes provides the foundational components\nthat are necessary for the centralized management of multiple\nKubernetes-based clusters across data centers, public clouds, and private\nclouds.\n\nYou can use the engine to create new Red Hat OpenShift Container Platform\nclusters, or to import existing Kubernetes-based clusters for management.\n\nAfter the clusters are managed, you can use the APIs that\nare provided by the engine to distribute configuration based on placement\npolicy.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28198",
"url": "https://access.redhat.com/errata/RHSA-2026:28198"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28198.json"
}
],
"title": "Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12",
"tracking": {
"current_release_date": "2026-06-30T11:45:02+00:00",
"generator": {
"date": "2026-06-30T11:45:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:28198",
"initial_release_date": "2026-06-23T10:55:53+00:00",
"revision_history": [
{
"date": "2026-06-23T10:55:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-23T10:56:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T11:45:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "multicluster engine for Kubernetes 2.6",
"product": {
"name": "multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_engine:2.6::el8"
}
}
}
],
"category": "product_family",
"name": "multicluster engine for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"product_id": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/assisted-image-service-rhel8@sha256%3A63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-image-service-rhel8\u0026tag=1782203217"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-rhel8@sha256%3Acae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-rhel8\u0026tag=1782204381"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-agent-rhel8@sha256%3Ac1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8\u0026tag=1782203505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-controller-rhel8@sha256%3A509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8\u0026tag=1782204403"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64",
"product_id": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64",
"product_identification_helper": {
"purl": "pkg:oci/assisted-service-8-rhel8@sha256%3Af7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-service-8-rhel8\u0026tag=1782203678"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/assisted-image-service-rhel8@sha256%3A9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-image-service-rhel8\u0026tag=1782203217"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-rhel8@sha256%3A40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-rhel8\u0026tag=1782204381"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-agent-rhel8@sha256%3A5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8\u0026tag=1782203505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-controller-rhel8@sha256%3A565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8\u0026tag=1782204403"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"product_id": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"product_identification_helper": {
"purl": "pkg:oci/assisted-service-8-rhel8@sha256%3Ac6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-service-8-rhel8\u0026tag=1782203678"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/assisted-image-service-rhel8@sha256%3A3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-image-service-rhel8\u0026tag=1782203217"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-rhel8@sha256%3A9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-rhel8\u0026tag=1782204381"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-agent-rhel8@sha256%3A89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8\u0026tag=1782203505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-controller-rhel8@sha256%3Abd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8\u0026tag=1782204403"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/assisted-service-8-rhel8@sha256%3A1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-service-8-rhel8\u0026tag=1782203678"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"product_id": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/assisted-image-service-rhel8@sha256%3Aa1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-image-service-rhel8\u0026tag=1782203217"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-rhel8@sha256%3Ab1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-rhel8\u0026tag=1782204381"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-agent-rhel8@sha256%3Aefc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8\u0026tag=1782203505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"product_id": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"product_identification_helper": {
"purl": "pkg:oci/assisted-installer-controller-rhel8@sha256%3A61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8\u0026tag=1782204403"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"product_id": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/assisted-service-8-rhel8@sha256%3Ae4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/assisted-service-8-rhel8\u0026tag=1782203678"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64 as a component of multicluster engine for Kubernetes 2.6",
"product_id": "multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T10:55:53+00:00",
"details": "For more information about Assisted Installer, see the following documentation:\n\nhttps://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#cim-intro\n\nFor multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro\n\nThis documentation will be available after the general availability release of Red Hat Advanced Cluster Management 2.11.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28198"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-23T10:55:53+00:00",
"details": "For more information about Assisted Installer, see the following documentation:\n\nhttps://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#cim-intro\n\nFor multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro\n\nThis documentation will be available after the general availability release of Red Hat Advanced Cluster Management 2.11.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28198"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x",
"multicluster engine for Kubernetes 2.6:registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:29854
Vulnerability from csaf_redhat - Published: 2026-06-25 08:18 - Updated: 2026-06-30 12:22Summary
Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
Severity
Important
Notes
Topic: A new version of OpenShift API for Data Protection (OADP) is now available.
Details: OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Workaround
|
Threats
Impact
Important
References
90 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of OpenShift API for Data Protection (OADP) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift API for Data Protection (OADP) enables you to back up and restore\napplication resources, persistent volume data, and internal container\nimages to external backup storage. OADP enables both file system-based and\nsnapshot-based backups for persistent volumes.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:29854",
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29854.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection",
"tracking": {
"current_release_date": "2026-06-30T12:22:13+00:00",
"generator": {
"date": "2026-06-30T12:22:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:29854",
"initial_release_date": "2026-06-25T08:18:45+00:00",
"revision_history": [
{
"date": "2026-06-25T08:18:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-25T08:18:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T12:22:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift API for Data Protection 1.4",
"product": {
"name": "OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "OpenShift API for Data Protection"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Aad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-operator-bundle@sha256%3Afbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1779848257"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Aca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ae213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Ad5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ab8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ab6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Abcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Aaabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Aeacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Af83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Af12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ab3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Acf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Ad437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Acaff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Afb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Adb5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Aa080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Afc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3Ae30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Afa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ad766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Ac720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Aed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:30650
Vulnerability from csaf_redhat - Published: 2026-06-28 14:38 - Updated: 2026-06-30 12:29Summary
Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.8 security update
Severity
Important
Notes
Topic: The multicluster engine for Kubernetes 2.8 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Details: The multicluster engine for Kubernetes v2.8 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Vendor Fix
fix
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Threats
Impact
Moderate
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Helm, a package manager for Kubernetes. A remote attacker could exploit this vulnerability by providing a specially crafted Chart to the `helm pull --untar` command. This would cause the Chart's contents to be written to an unintended directory, potentially overwriting existing files or placing malicious files in an accessible location, leading to data integrity and availability issues.
4.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Vendor Fix
fix
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Threats
Impact
Moderate
A flaw was found in the `idna` package, specifically within the `golang.org/x/net/idna` component. This vulnerability allows for privilege escalation due to incorrect processing of Punycode-encoded labels. An attacker could craft a malicious Punycode label that, when initially checked, appears safe but then decodes to a restricted ASCII hostname, bypassing security controls and gaining unauthorized access.
8.2 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Vendor Fix
fix
|
Known not affected
100 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `golang.org/x/crypto/ssh` component. This vulnerability allows a remote attacker to bypass source-address validation in certain SSH server configurations. By providing a callback type other than a public key, an attacker can circumvent security checks, potentially leading to unauthorized access.
7.1 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le | — |
Vendor Fix
fix
|
Known not affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x | — |
Threats
Impact
Important
References
110 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The multicluster engine for Kubernetes 2.8 General Availability release images,\nwhich add new features and enhancements, bug fixes, and updated container images.",
"title": "Topic"
},
{
"category": "general",
"text": "The multicluster engine for Kubernetes v2.8 images\n\nThe multicluster engine for Kubernetes provides the foundational components\nthat are necessary for the centralized management of multiple\nKubernetes-based clusters across data centers, public clouds, and private\nclouds.\n\nYou can use the engine to create new Red Hat OpenShift Container Platform\nclusters or to bring existing Kubernetes-based clusters under management by\nimporting them. After the clusters are managed, you can use the APIs that\nare provided by the engine to distribute configuration based on placement\npolicy.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:30650",
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47914",
"url": "https://access.redhat.com/security/cve/CVE-2025-47914"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-35206",
"url": "https://access.redhat.com/security/cve/CVE-2026-35206"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30650.json"
}
],
"title": "Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.8 security update",
"tracking": {
"current_release_date": "2026-06-30T12:29:58+00:00",
"generator": {
"date": "2026-06-30T12:29:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:30650",
"initial_release_date": "2026-06-28T14:38:37+00:00",
"revision_history": [
{
"date": "2026-06-28T14:38:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-28T14:38:51+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T12:29:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "multicluster engine for Kubernetes 2.8",
"product": {
"name": "multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_engine:2.8::el9"
}
}
}
],
"category": "product_family",
"name": "multicluster engine for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1782160196"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Ac0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1782158798"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1782476869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1782157633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1782158032"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782157905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1782321922"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Ae3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1782158978"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Aaf1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1782157727"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Abc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1782158261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1782162410"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1782157085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1782158169"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1782327523"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Afd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1782411217"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ab1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1782471903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Af83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1782471905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3Aac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1782159194"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1782477094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1782163896"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1782159492"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Ac7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1782308518"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Af5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1782160009"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782491957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1782160541"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1782160210"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3Ac294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1782159773"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1782160196"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Aa37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1782158798"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1782476869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1782157633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1782158032"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Abc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782157905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1782321922"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1782158978"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1782157727"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1782158261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Ab362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1782162410"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Ad6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1782157085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1782158169"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1782327523"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1782411217"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1782471903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Ac7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1782471905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1782159194"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Aad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1782477094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Ac0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1782163896"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1782159492"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Ad0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1782308518"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Ace9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1782160009"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ad44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782491957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1782160541"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1782160210"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3Ae6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1782159773"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3Ac35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1782160196"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1782158798"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1782476869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1782157633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1782158032"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782157905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1782321922"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Ac3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1782158978"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1782157727"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Abb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1782158261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1782162410"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1782157085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1782158169"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1782327523"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1782411217"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ac21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1782471903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1782471905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1782159194"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1782477094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Afc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1782163896"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Ad454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1782159492"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1782308518"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1782160009"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782491957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1782160541"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1782160210"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3Aed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1782159773"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1782160196"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Accac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1782158798"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Ad6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1782476869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1782157633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1782158032"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1782157905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Ab5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1782321922"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1782158978"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1782157727"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1782158261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Aab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1782162410"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1782157085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Ae030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1782158169"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1782327523"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1782411217"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1782471903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Aed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1782471905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1782159194"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Af59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1782477094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1782163896"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Ad621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1782159492"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Aa2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1782308518"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1782160009"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ad62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1782491957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1782160541"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ab7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1782160210"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1782159773"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-47914",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-19T21:01:06.202641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416000"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. The golang.org/x/crypto/ssh/agent library, when used in SSH Agent servers, does not properly validate the size of messages during new identity requests. A specially crafted malformed message can lead to an out-of-bounds read, causing the program to panic and resulting in a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47914"
},
{
"category": "external",
"summary": "RHBZ#2416000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416000"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914"
},
{
"category": "external",
"summary": "https://go.dev/cl/721960",
"url": "https://go.dev/cl/721960"
},
{
"category": "external",
"summary": "https://go.dev/issue/76364",
"url": "https://go.dev/issue/76364"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4135",
"url": "https://pkg.go.dev/vuln/GO-2025-4135"
}
],
"release_date": "2025-11-19T20:33:43.126000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-35206",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-04-09T22:05:35.573151+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457151"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Helm, a package manager for Kubernetes. A remote attacker could exploit this vulnerability by providing a specially crafted Chart to the `helm pull --untar` command. This would cause the Chart\u0027s contents to be written to an unintended directory, potentially overwriting existing files or placing malicious files in an accessible location, leading to data integrity and availability issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35206"
},
{
"category": "external",
"summary": "RHBZ#2457151",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457151"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35206",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35206"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35206",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35206"
},
{
"category": "external",
"summary": "https://github.com/helm/helm/commit/4e7994d4467182f535b6797c94b5b0e994a91436",
"url": "https://github.com/helm/helm/commit/4e7994d4467182f535b6797c94b5b0e994a91436"
},
{
"category": "external",
"summary": "https://github.com/helm/helm/releases/tag/v4.1.4",
"url": "https://github.com/helm/helm/releases/tag/v4.1.4"
},
{
"category": "external",
"summary": "https://github.com/helm/helm/security/advisories/GHSA-hr2v-4r36-88hr",
"url": "https://github.com/helm/helm/security/advisories/GHSA-hr2v-4r36-88hr"
}
],
"release_date": "2026-04-09T21:02:13.594000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `idna` package, specifically within the `golang.org/x/net/idna` component. This vulnerability allows for privilege escalation due to incorrect processing of Punycode-encoded labels. An attacker could craft a malicious Punycode label that, when initially checked, appears safe but then decodes to a restricted ASCII hostname, bypassing security controls and gaining unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important privilege escalation flaw in the `golang.org/x/net/idna` package. Applications utilizing this package for hostname validation in Red Hat products may incorrectly process specially crafted Punycode labels. This can lead to a bypass of security controls, as a seemingly benign Punycode domain could resolve to a restricted ASCII hostname, granting unauthorized access.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `golang.org/x/crypto/ssh` component. This vulnerability allows a remote attacker to bypass source-address validation in certain SSH server configurations. By providing a callback type other than a public key, an attacker can circumvent security checks, potentially leading to unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important authorization bypass in `golang.org/x/crypto/ssh` affects Red Hat products configured with vulnerable SSH servers. A remote attacker can circumvent source-address validation by presenting a callback type other than a public key, leading to unauthorized access and compromising system integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-28T14:38:37+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:067f271200af2796324202c723a665d1aee6e012fdc505c94a8b4006112dd2c5_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:34c1cd6fdd14818883b1a0e91d8f5f67de79d7b0d6852b99411ae6c0c961d656_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:665ae8454a39b7afda3026e20040633c8b1024eef66790fcfe2dd21c1a803df9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c35772a9737ec2c31498708a8b071e6dfab706ecae2b82d47cba00da335a77f1_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:13c3febd4002fec374561ab0e3b00280c08341d70a239f5af7ade36233b79759_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:45c72c3f54769ecacff8ece969fe435a4777104e9220a3f8dadeae43ee86d097_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7b6521c16b36c6d5f3d4a2db051a6ff0814541600a4129fe246a408a9f0cc031_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:d6826a9d411de2fcca7a5a22d796b64f99b20e385fce91a92b81f636672c3191_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:14d3124ed9be8e534e8a2377518d7a9bd9bd01e6174dd6781ef1c18ded8815cd_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:2a42eef110a25716570e693a9212a7ce2ce11e46ad8e918e0c7699bcc99a54eb_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:310ba4cd5cabcee512da2cb493232c9364c5ead4f8a9d91b164a56fe3f20fe69_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:99a8b26346d2b30ad0db63f8ff1404d4dbae8bdc634d1fc963bb8b88a8be07b4_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:147834908ded77468a47af91c7b084c9438a5ef5b3dd41f98ea5701a6947b094_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:62de815e7f2ffdc012891bdad911def585432b0ec09f3a1843bede26fabf3bd0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:807729832d1cc8f5b08cfab70647fef14808d3659377b6b74842a0d093c59eac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98ff616cb33739725c0f2dbdf4790410f502affbd65a6bc33263b26faa084214_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:2d611b12c195f574342cd4d419fdfc39eeead11c254380799be95b2a8fe7f19e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:922da17301a8402f164884ae3a64be25bb7c27b720dc3c97d0bebd3b07a7267b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:9f0f83d067ffdc647d55ddf2c5b91ca95e5fb35c8c87e97e3352cdd95ea0025f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bc0a00ea7b4e36e64d864bd75267130a2442fe1413574e2fe180b20bf7a73690_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:0d44f8cded5ad717db46e1af2a27e539dfba0c2ae977be51362a7bd35fa709ca_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6fa871533e19c9508ad85fbf59925257c9d4fa86be8036a062d1da8a76eb7b4b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:8fbc81afb8dbcd70fc9b68cc71e1502e43ee0e5c9a2d4c8f488366de08dd3699_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b5f40208ecde27e078eb76b7fcbaec0062998b600647ece378d9fb0d9fe2fb04_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3c25db03df91ebc75331713c22db621e0bd919db08a4ede84fc6b8bc2605b465_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:82715573ed69f32140814702243cf406ede7e789b80a65f8e265299585ef5061_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c3839de92a3627917604f02a5f755e0187a7e8b13a0659df5ccd5dcef37594a8_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e3a51132346fe05e29115f2971842f4af557c439ceb243d71b57436ce065dccd_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:5887b755757e2ebcbfcb202743e3af5b1618a179c940d589d0079499dd131b5b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:7278bb01face0a41eeb3b7630967e6eea225d798dddd83fbb2f6d352d7e0f988_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:89318ddd66048e58ee9c696c31f87447f8499d94ee957bc5c021d73dd21d8238_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:af1ace71cb395f2ddae2c771ccf47310aec0a22bf42d96d1391deb2280761d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:0c474631e4a6284f5af8c0675b7c2fb9fe42894abed4dcfea02ceb9e221824a6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:7daf7aab4e2d3ef0c175325b4523c6a8ff20fbe29f955efbe596470e12dbc64b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bb73e0b0c6ffd28e67117fd3dd33329e99a6c3b6880b2379ffe86794c6edb603_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:bc93fddfba9f081208da2e32df3e28d41019d77d94430b990bab16549007bac9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:267f6f705630db8868487792be1feb400c3851a905cd0ffe4caece360001fb06_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:8a767dbfd76e420bf07652586d36e85183c4fda426af16bbd254cb44fbb21de6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:ab40c2d984ce7a2cdd7d0f2bcfe05108d3b3da7df21a83b5d4e4f61296279581_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:b362920fe0babd4f6728f8c5aac4db1e00db5e7c62206d176fac4ad730c5085b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:329b7054ec1fb3ac135f5dc909ed0e9a278d6105a2601b7a23a30cc2d526988c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:3352f6cb47c7506b00800db07f7b55c84cba1c584cd189e07376581b69c6090b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:397a8fd7fe43315da03bc6c08c985a86eb6d1579abe7d78163302a3dfdbc7316_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d6118e0d58e5bbc0c89a2fc6db9230d27ca6ed512776e1c2fee17d6048e6c948_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:62ee4f3e9ae6d62724b9d6a69d6b2b23b14fc595f06de8fcb3538ca6f043f60b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6b554a9530e84fba0f9767d51401061f37e3c91721d6a01f52d5cfc897b02cac_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:905d95bd4cae4a8c2d81a8221541d221f59034831243fd6b899fd16ce85d0c2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:e030ceabb72ef1a4f460da39bb9960314dffb140f35315a3c0d372424178ca44_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:3d50a86bdbaf6ebb452ebfa7618986c346077cfd0b352f15f7bca3071abc219d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:544b6e9e39b1a99dfcc1b5f06ee0dc3628e194b5c16c608185c4f76ed67a8693_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:5630d05770bb3202a0fe32d3d3834b3d2d6be0bb25320576daf27cf5a0610f0d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6276d8c9fd657b8b6f68c3888a909f3b635898687bde581fbff66e9ecb9d6c78_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:184fa3fb3ff97ef4cb7b1cfda986a3ab9e891019c57687f24a7b854b30705107_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5401124696e030c8053d6ac191b673df120902cf8328df82f51394d0bdebfb73_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:75b64f5414df5c970c98738f3061014f7d28de9698e0e54aa89f202da88e6330_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fd9fc7396e5f1eb8e4262bc18e4c99a4a3d28c3b835e558f4744dadc54e1c7d7_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:75e66c70ebaf8c9357c100f18e266e0a1aa817389b82bc7decb7ea4e709ee0a4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:9adf44cc9967a816a2ec8d176ac9dbf1f7334d53037619ac59a14b943404bf82_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b1589035bbf5e764951dd5350f4ca4057db66d97b4c8f75d59b5f358d7766b3a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c21b369f77db9b4c20ac8a9fc78af8a8f43d79ad6dd621bd94dcf965578f98cf_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:762941c7f8d4605433722f48f5ab76a059514340382cb6647d36a94458cda044_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:c7d67d3abe9a19da6454d7f5bfbfc808d8cbd482ad6350da8c6f25cbdc71bcee_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:ed233dae281004461be86a3d137d42451285c19013e42ec6945c3a9192ee603e_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:f83c537da6ea86d9cc9cd4e527ca25ef0c072d1ee09415cbf73ae49a76d5c5ab_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:14dd5ca3b064d154b6286074bdc8a53d1b3d740380945f3bc217cd823a54521f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:7169e3a79ddb7f2d408ef25dc7444dba661cef1f623ed221b2d8bb5603159285_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9c2a9cd7aa6e5edf488f33949f7c7d2269957c65c09e74e001452e78f60ee7e5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ac6c48804e36c605ea7200c22f2d8ff0e964aedc1f935441b424170a525332ac_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:3e87c01d05714a0292c9b59d8205812e61029630191b5b2e1601a788a524cf0e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9ecd8777bf5cfd8a51901b9003fbfe69dae99b9d767d87c9aeeba9a5caf1797c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:ad811fd261e3007a26e104a8fb39c8120b179efba9cf8cdbaa059a9b1eddf254_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f59128449002763607ddba8453c3ac727414df1b8f4f0cd3a7c8260bc2db0b96_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:23b3e42c4cb75cba23c68ec5b412d89ef8c1004970ceab2c67ca213ec6ff6f55_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:796fcf55160e2a47488df127ffffc29adc74096b4f839786a2b65e25c13843c1_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:c0cfce2df906ee8c9d4d6774acf251c53fd7ec370d5465fec1bac92c76fc7bae_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fc3d19b736f50148d994b1545dcea1e47d671c04c84bdbc527984202da9a9c05_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5a39479295833212d9bd58b3fe3730b6cde0e8564192c9ee75801269d7164bda_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:5d993d7c1956778b37f8af51ebeefcb144c98dcd5d5b5996d3bf49b9a3ec53c9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d454bdeb91c46a6c53185f151ef76e61464d72aa83507687154a7fb9d3577e2b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:d621cecceea5cfda712d73360ad17e78eff20b062888f269dcfd5fd00df4e788_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0ad578e134ae559718419a75675a9baeafd92c02923ec49ed30756069bda44f7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a2ea661bb43b957a07ee75d422a57282af6a550991883f6bd8210bd75356f7c8_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c7be133e677e339115b2a4d38a076c2e471a549d833e4cba9e083d2c3131ec77_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d0df17206827dd9b5a2d96cfedfde62c42314f3234b8463b66860c37f4c8bbb7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:4015e545d1a23a0aca44c312042cce35ca9595a6d12354ea5a14c15990b9770d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:a37e38b8196c8ac31f89bdad651fa087df393f70a008291e922af9fd993d0685_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c0216c1e2775dfaa1810401c91ac3367463b8d920961411e3c3c051312d53be8_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:ccac46d315e5088b4faba8acb9503f959801127eceaffefcb3df39b6cb0c8213_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:62857feec215150b4a8f88f6fa3c439796e402bb00ae52ff66aa028a0443023f_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:926fb5dcf4fbfe37b2eed5e7d126a8e3dc92858a9902085b5283f1dcaa85181d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ce9dbf5d90d12cafb4b3e51d48ab14a6a7bbfe20481dae5f84a544c9ec1955f6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:f5bf754e3ea4f42ba47c0bc5a3a4ef2e2163fd97d63f9d6a67fb55ca9b4d2b79_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:615e89f8db0322455fe370266942c761d4d3fae8c32693faa1b69f0f23c875c9_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:856a640d26186ac90ec9b1d071fc0c3a46b2e81c1836e441f143447b725ad594_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d44e395704b38c2a5eabd1d6f6a5be91ce6e998f5313a1d12aced96ddf3243dc_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:d62e7f3d4da2e06933f1522346af1e43154d998da674ac3f6bacaacd8aed8a3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:421a1bc5ad532b638cc4d2e563819a7f6ec6e0b6fd01cfe05d6911eee618a8fc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:461a70916471a4dcdf27792684af8180a1ef225690717f3576294a22ae598024_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:8328fbbecc0f15c7ebadcf68100fa156e74703ce4c7738d0b3a410272539d35d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b7b2c6eedde524c01cbf498bd8ddd83040bbec7f763553e9398b6618d7c8a1d4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:05a60b2cd84d5847054b76c78a7e5fe829d9ad7749fd6d07cc380d08aa73a200_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:0eeefd0ba5c86bb4b2f5631e7e8ff1c09f5a6223dc841c14293d277ffbfb3ff0_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:3256879ac6389766cb377e51059793f82a0ea206d232a8b926e53350dc274f18_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7321d069f3c2810754ef28c100612b8c9eeeee58aefb180254a710cf84438ae9_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:309280d7a206e8d386fb1cf0f0000669cedc3a49abaf16da21b619adc0d64803_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:c294a51cf2a343a44c28dce02d42897f8601388b668d893abc530dc02f02fb94_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:e6643eb7c0e3781be0738e6d0b4636041a58f0a955617790c1c20374f2cd9ff6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:ed9d9cd7e9316ab78b44c27cab4f9fcef6868f5612a845114ea23eaebfc12521_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:32991
Vulnerability from csaf_redhat - Published: 2026-06-29 12:36 - Updated: 2026-06-30 11:45Summary
Red Hat Security Advisory: osbuild-composer security update
Severity
Important
Notes
Topic: An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.
Security Fix(es):
* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.\n\nSecurity Fix(es):\n\n* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:32991",
"url": "https://access.redhat.com/errata/RHSA-2026:32991"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_32991.json"
}
],
"title": "Red Hat Security Advisory: osbuild-composer security update",
"tracking": {
"current_release_date": "2026-06-30T11:45:02+00:00",
"generator": {
"date": "2026-06-30T11:45:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:32991",
"initial_release_date": "2026-06-29T12:36:37+00:00",
"revision_history": [
{
"date": "2026-06-29T12:36:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-29T12:36:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T11:45:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.4::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "osbuild-composer-0:101.3-4.el9_4.2.x86_64",
"product": {
"name": "osbuild-composer-0:101.3-4.el9_4.2.x86_64",
"product_id": "osbuild-composer-0:101.3-4.el9_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer@101.3-4.el9_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.x86_64",
"product": {
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.x86_64",
"product_id": "osbuild-composer-core-0:101.3-4.el9_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core@101.3-4.el9_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64",
"product": {
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64",
"product_id": "osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker@101.3-4.el9_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64",
"product": {
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64",
"product_id": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debugsource@101.3-4.el9_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product": {
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product_id": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core-debuginfo@101.3-4.el9_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product": {
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product_id": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debuginfo@101.3-4.el9_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product": {
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product_id": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-tests-debuginfo@101.3-4.el9_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product": {
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product_id": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker-debuginfo@101.3-4.el9_4.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "osbuild-composer-0:101.3-4.el9_4.2.src",
"product": {
"name": "osbuild-composer-0:101.3-4.el9_4.2.src",
"product_id": "osbuild-composer-0:101.3-4.el9_4.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer@101.3-4.el9_4.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "osbuild-composer-0:101.3-4.el9_4.2.aarch64",
"product": {
"name": "osbuild-composer-0:101.3-4.el9_4.2.aarch64",
"product_id": "osbuild-composer-0:101.3-4.el9_4.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer@101.3-4.el9_4.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.aarch64",
"product": {
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.aarch64",
"product_id": "osbuild-composer-core-0:101.3-4.el9_4.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core@101.3-4.el9_4.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64",
"product": {
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64",
"product_id": "osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker@101.3-4.el9_4.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64",
"product": {
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64",
"product_id": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debugsource@101.3-4.el9_4.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product": {
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product_id": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core-debuginfo@101.3-4.el9_4.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product": {
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product_id": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debuginfo@101.3-4.el9_4.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product": {
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product_id": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-tests-debuginfo@101.3-4.el9_4.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product": {
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product_id": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker-debuginfo@101.3-4.el9_4.2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "osbuild-composer-0:101.3-4.el9_4.2.ppc64le",
"product": {
"name": "osbuild-composer-0:101.3-4.el9_4.2.ppc64le",
"product_id": "osbuild-composer-0:101.3-4.el9_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer@101.3-4.el9_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le",
"product": {
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le",
"product_id": "osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core@101.3-4.el9_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le",
"product": {
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le",
"product_id": "osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker@101.3-4.el9_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le",
"product": {
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le",
"product_id": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debugsource@101.3-4.el9_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product": {
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product_id": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core-debuginfo@101.3-4.el9_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product": {
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product_id": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debuginfo@101.3-4.el9_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product": {
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product_id": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-tests-debuginfo@101.3-4.el9_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product": {
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product_id": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker-debuginfo@101.3-4.el9_4.2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "osbuild-composer-0:101.3-4.el9_4.2.s390x",
"product": {
"name": "osbuild-composer-0:101.3-4.el9_4.2.s390x",
"product_id": "osbuild-composer-0:101.3-4.el9_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer@101.3-4.el9_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.s390x",
"product": {
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.s390x",
"product_id": "osbuild-composer-core-0:101.3-4.el9_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core@101.3-4.el9_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.s390x",
"product": {
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.s390x",
"product_id": "osbuild-composer-worker-0:101.3-4.el9_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker@101.3-4.el9_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x",
"product": {
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x",
"product_id": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debugsource@101.3-4.el9_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x",
"product": {
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x",
"product_id": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-core-debuginfo@101.3-4.el9_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x",
"product": {
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x",
"product_id": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-debuginfo@101.3-4.el9_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x",
"product": {
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x",
"product_id": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-tests-debuginfo@101.3-4.el9_4.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x",
"product": {
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x",
"product_id": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/osbuild-composer-worker-debuginfo@101.3-4.el9_4.2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-0:101.3-4.el9_4.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.aarch64"
},
"product_reference": "osbuild-composer-0:101.3-4.el9_4.2.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-0:101.3-4.el9_4.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.ppc64le"
},
"product_reference": "osbuild-composer-0:101.3-4.el9_4.2.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-0:101.3-4.el9_4.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.s390x"
},
"product_reference": "osbuild-composer-0:101.3-4.el9_4.2.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-0:101.3-4.el9_4.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.src"
},
"product_reference": "osbuild-composer-0:101.3-4.el9_4.2.src",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-0:101.3-4.el9_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.x86_64"
},
"product_reference": "osbuild-composer-0:101.3-4.el9_4.2.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.aarch64"
},
"product_reference": "osbuild-composer-core-0:101.3-4.el9_4.2.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le"
},
"product_reference": "osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.s390x"
},
"product_reference": "osbuild-composer-core-0:101.3-4.el9_4.2.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-0:101.3-4.el9_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.x86_64"
},
"product_reference": "osbuild-composer-core-0:101.3-4.el9_4.2.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64"
},
"product_reference": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le"
},
"product_reference": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x"
},
"product_reference": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64"
},
"product_reference": "osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64"
},
"product_reference": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le"
},
"product_reference": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x"
},
"product_reference": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64"
},
"product_reference": "osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64"
},
"product_reference": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le"
},
"product_reference": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x"
},
"product_reference": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64"
},
"product_reference": "osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64"
},
"product_reference": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le"
},
"product_reference": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x"
},
"product_reference": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64"
},
"product_reference": "osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64"
},
"product_reference": "osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le"
},
"product_reference": "osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.s390x"
},
"product_reference": "osbuild-composer-worker-0:101.3-4.el9_4.2.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64"
},
"product_reference": "osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64"
},
"product_reference": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le"
},
"product_reference": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x"
},
"product_reference": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64"
},
"product_reference": "osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.src",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T12:36:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.src",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:32991"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.src",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.src",
"AppStream-9.4.0.Z.E4S:osbuild-composer-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-core-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-debugsource-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-tests-debuginfo-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-0:101.3-4.el9_4.2.x86_64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.aarch64",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.ppc64le",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.s390x",
"AppStream-9.4.0.Z.E4S:osbuild-composer-worker-debuginfo-0:101.3-4.el9_4.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:8490
Vulnerability from csaf_redhat - Published: 2026-04-16 14:03 - Updated: 2026-06-30 12:22Summary
Red Hat Security Advisory: Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1
Severity
Critical
Notes
Topic: Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1 is now available.
An update is now available for Red Hat OpenShift Service Mesh 3.1. This advisory contains the RPM packages for the Kiali component.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.11.9, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13231, OSSM-13234)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12921)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12897, OSSM-12898)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-12977, OSSM-12978)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13012)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13119, OSSM-13120)
* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13147)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13256, OSSM-13257)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
68 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1 is now available.\nAn update is now available for Red Hat OpenShift Service Mesh 3.1. This advisory contains the RPM packages for the Kiali component.\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.11.9, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13231, OSSM-13234)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12921)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12897, OSSM-12898)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-12977, OSSM-12978)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13012)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13119, OSSM-13120)\n* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13147)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13256, OSSM-13257)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8490",
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8490.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1",
"tracking": {
"current_release_date": "2026-06-30T12:22:22+00:00",
"generator": {
"date": "2026-06-30T12:22:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:8490",
"initial_release_date": "2026-04-16T14:03:40+00:00",
"revision_history": [
{
"date": "2026-04-16T14:03:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-16T14:03:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T12:22:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.1",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Af16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Af341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Adf2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Afd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151270"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Ae419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151106"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:03:40+00:00",
"details": "See Kiali 2.11.9 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2286c9f07dee34f8a52aacbedbc545e513264b78372ed34e236ec9331d3aed20_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:4c7def4937e5f0bb2910816ee95499f7986f1ab7e3a97d488233f57beebec7fd_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:df2ebf49de4448adb5aff51c23ba848436f3fdf0fb498b46e19d2a11a09e6f0d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e419454c0ecc585545d8f133c627939f15f3b3bbf545c6c073a4d700d4496c32_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f16079699557aa847cf4b51fe623f22bf2f0154b4146f0cd305019645af68292_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:f341c0b4ba1f5c8a7588c62574b854c835f88e700a38a91999af285a3b2c88ff_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:fd0468b0ceacbf829ad8a0565c16417aa8ddc2d4ed91cd8fc9236173f8bcae54_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:8491
Vulnerability from csaf_redhat - Published: 2026-04-16 14:30 - Updated: 2026-06-30 12:22Summary
Red Hat Security Advisory: Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2
Severity
Critical
Notes
Topic: Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2 is now available.
An update is now available for Red Hat OpenShift Service Mesh 3.2. This advisory contains the RPM packages for the Kiali component.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.17.6, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13235, OSSM-13236)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12922)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12900, OSSM-12901)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-12980, OSSM-12981)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13018)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13122, OSSM-13123)
* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13162)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13259, OSSM-13260)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
68 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2 is now available.\nAn update is now available for Red Hat OpenShift Service Mesh 3.2. This advisory contains the RPM packages for the Kiali component.\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.17.6, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13235, OSSM-13236)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-12922)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-12900, OSSM-12901)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-12980, OSSM-12981)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13018)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13122, OSSM-13123)\n* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13162)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13259, OSSM-13260)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8491",
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8491.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2",
"tracking": {
"current_release_date": "2026-06-30T12:22:20+00:00",
"generator": {
"date": "2026-06-30T12:22:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:8491",
"initial_release_date": "2026-04-16T14:30:52+00:00",
"revision_history": [
{
"date": "2026-04-16T14:30:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-16T14:31:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T12:22:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.2",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Ae43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Ada74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776149682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776155669"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:30:52+00:00",
"details": "See Kiali 2.17.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:23b96190a7c4ed61dc20ed81a11f99096af177b3eec5af90fadc1cb3f098ad34_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2cbbcb77e7c104996fa49917515cf0150474f72092633871f9a6020a49e62b3f_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:9189ec99cd763c438e7c2c4f5669283021c0513d9b0aaf6173d91702c140e162_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:e43c69758c022a2ce3e61d5f7d223be39b42f4d9b7d4fae6a1226d8e36cb38c9_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4309ccac390fa120a821547fa34cc7096b266295d60218dd65f066143b53e0bc_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:841225db46ae16da39452a4457be2e30cfc94f6020e6292c8b7e5c492f016d52_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:da74bc8c1c41d7d96aeb947df89aecd1ccd6760c98944ae112af65d9df85f220_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:8493
Vulnerability from csaf_redhat - Published: 2026-04-16 14:41 - Updated: 2026-06-30 12:22Summary
Red Hat Security Advisory: Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3
Severity
Critical
Notes
Topic: Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3 is now available.
An update is now available for Red Hat OpenShift Service Mesh 3.3. This advisory contains the RPM packages for the Kiali component.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.22.2, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13237, OSSM-13238)
* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-13272)
* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-13274, OSSM-13275)
* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (OSSM-13276, OSSM-13277, OSSM-13278)
* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13279, OSSM-13280)
* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13281, OSSM-13282)
* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13283)
* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13284, OSSM-13285)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 | — |
Threats
Impact
Important
References
68 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3 is now available.\nAn update is now available for Red Hat OpenShift Service Mesh 3.3. This advisory contains the RPM packages for the Kiali component.\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.22.2, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2025-62718 Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (OSSM-13237, OSSM-13238)\n* CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url (OSSM-13272)\n* CVE-2026-29074 SVGO: Denial of Service via XML entity expansion (OSSM-13274, OSSM-13275)\n* CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) (OSSM-13276, OSSM-13277, OSSM-13278)\n* CVE-2026-33186 gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (OSSM-13279, OSSM-13280)\n* CVE-2026-4800 lodash: Arbitrary code execution via untrusted input in template imports (OSSM-13281, OSSM-13282)\n* CVE-2026-34986 Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (OSSM-13283)\n* CVE-2026-40175 Axios: Remote Code Execution via Prototype Pollution escalation (OSSM-13284, OSSM-13285)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8493",
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8493.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3",
"tracking": {
"current_release_date": "2026-06-30T12:22:21+00:00",
"generator": {
"date": "2026-06-30T12:22:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:8493",
"initial_release_date": "2026-04-16T14:41:31+00:00",
"revision_history": [
{
"date": "2026-04-16T14:41:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-16T14:41:38+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T12:22:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.3",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Adaa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-operator-bundle@sha256%3Ac93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776225903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Ace46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3Aa69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Afe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Aea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151277"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151094"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Afd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh\u0026tag=1776151134"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-16T14:41:31+00:00",
"details": "See Kiali 2.22.2 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:c93dae9691dc8dc27127f89c445a65c79f827af2af047f53484215b392c0d51f_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:27cf9029920456be99f8a4d03a0b45eea94a4c29ad4ceca663d5c87264d9cd02_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea518811fcc9d723a1c8076216a6c4c57fd7f5eaf0860f9b688009a7b1078650_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fd22a9687dc53d555340d6eb203690e45f90f3096dbb9dd5ccae3c12b654dfe3_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:fe2cb99f7ebdb875e25d699f1553b6616ddadede21c4881f4be4f841e51ccb27_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:202c1a86dd47f4f8c124e63e9dae4687b8fb450759171e73cd2158cd825bf6aa_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:69458a43dcd771a59c62ea33cd2624c8b2170a0f49ad849e5ddbaff606902aa1_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:8d16db896ac1d5cc9db7a3fbbbad1913eacc6656373af73e26d432e54b7a3156_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a69106c836d9c8d0d711ab618b1bde2c6d9f30ea278de4afc5b51c0ee27d628d_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:7e3bd934c479c704aa5bd07ca43ef3393e3c09a24e7dbb190e5d77758e72e4fa_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ce46c36d0b7a0a20214ea0152bb9894aa4626f23500e1c7a5e0ec696290a3bfd_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:daa972852bddb585e4ff5fa28d41680bea204fb29cac28a8f354d1a93591ab0c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:9385
Vulnerability from csaf_redhat - Published: 2026-04-21 15:08 - Updated: 2026-06-30 12:22Summary
Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release
Severity
Important
Notes
Topic: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 has been released
Details: This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements and bug fixes.
Breaking changes:
* None.
Deprecations:
* None.
Technology Preview features:
* None.
Enhancements:
* None.
Bug fixes:
* gRPC-Go authorization bypass vulnerability fix: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 :path pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed :path that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the :path pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.
* XPath component fix: Previously, the github.com/antchfx/xpath component did not properly handle certain Boolean XPath expressions. A remote attacker could submit a crafted expression that caused an infinite loop, resulting in 100% CPU utilization and a denial-of-service condition. With this update, the XPath component correctly processes Boolean expressions that evaluate to true. The system no longer enters an infinite loop when handling these expressions. For more information, see https://access.redhat.com/security/cve/cve-2026-4645.
* Go JOSE denial-of-service vulnerability fix: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial-of-service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.
* Lodash _.template function fix: Previously, the lodash _.template function validated the variable option but did not validate options.imports key names. Both options passed values to the same code execution path. An attacker with the ability to control options.imports key names or pollute Object.prototype could exploit this gap to execute arbitrary code. With this update, lodash validates options.imports key names by using the same rules applied to the variable option. The _.template function rejects invalid key names and prevents code injection through this path. For more information, see https://access.redhat.com/security/cve/cve-2026-4800.
* Go crypto/x509 and crypto/tls packages fix: Previously, the Go standard library crypto/x509 and crypto/tls packages did not limit the number of intermediate certificates processed during certificate chain building. An attacker could provide an excessive number of intermediate certificates, causing the system to perform an uncontrolled amount of work and resulting in a denial-of-service condition. With this update, the packages limit the number of intermediate certificates accepted during certificate chain validation. The system rejects certificate chains that exceed this limit. For more information, see https://access.redhat.com/security/cve/cve-2026-32280.
* Go Root.Chmod function fix: Previously, the Root.Chmod function in the Go standard library internal/syscall/unix package had a race condition between checking and modifying a target file. An attacker could replace the target with a symbolic link after the check but before the operation completed, causing the permission change to apply to the linked file instead. This allowed an attacker to bypass directory restrictions and change permissions on unintended files. With this update, the Root.Chmod function prevents this race condition. The function no longer follows symbolic links that replace the target during execution. For more information, see https://access.redhat.com/security/cve/cve-2026-32282.
* Go crypto/x509 package fix: Previously, the Go crypto/x509 package applied excluded DNS constraints to wildcard Subject Alternative Names (SANs) in a case-sensitive manner. An attacker could bypass certificate validation by using a different case in the wildcard SAN than the excluded DNS constraint specified. This allowed the system to accept a malicious certificate that should have been rejected. With this update, the package applies DNS constraints case-insensitively when validating wildcard SANs. Certificate chain verification correctly rejects certificates that match excluded DNS constraints regardless of case. For more information, see https://access.redhat.com/security/cve/cve-2026-33810.
* Go crypto/tls component fix: Previously, the Go crypto/tls component did not re-validate certificates against updated certificate authority (CA) settings during TLS session resumption. If CA settings changed between the initial handshake and a resumed session, the component used the original CA settings. An attacker could exploit this to bypass certificate validation and establish a connection that should have been rejected. With this update, the component validates certificates against the current CA settings during session resumption. Resumed sessions that no longer meet CA requirements are rejected. For more information, see https://access.redhat.com/security/cve/cve-2025-68121.
* jsonparser Delete function fix: Previously, the Delete function in the github.com/buger/jsonparser component did not validate offsets when processing malformed JSON input. A remote attacker could provide crafted JSON data that caused a runtime panic, resulting in a denial-of-service condition. With this update, the Delete function validates offsets before processing. The function handles malformed JSON input as expected. For more information, see https://access.redhat.com/security/cve/cve-2026-32285.
* path-to-regexp component fix: Previously, the path-to-regexp component did not limit the complexity of generated regular expressions. A remote attacker could provide input containing multiple sequential optional groups, causing exponential growth in the generated expression and excessive resource consumption. This resulted in a denial-of-service condition. With this update, the component limits regular expression complexity. Input patterns with sequential optional groups no longer cause excessive resource consumption. For more information, see https://access.redhat.com/security/cve/cve-2026-4926.
* Go net/url.Parse function fix: Previously, the Go net/url.Parse function did not properly validate the host component of URLs containing IP-literals. The function ignored invalid characters preceding IP-literals and accepted URLs that should have been rejected. With this update, the function validates the entire host component. URLs with invalid characters before IP-literals are rejected as malformed. For more information, see https://access.redhat.com/security/cve/cve-2026-25679.
* Go crypto/x509 module fix: Previously, the Go crypto/x509 module did not apply all email address constraints when validating certificates. If a certificate contained multiple email constraints with the same local portion but different domain portions, the module only enforced the last constraint and ignored the others. With this update, the module applies all email address constraints during certificate chain validation. Certificates are validated against every specified email constraint. For more information, see https://access.redhat.com/security/cve/cve-2026-27137.
Known issues:
* Gateway fails to forward OTLP HTTP traffic when receiver TLS is enabled. When Tempo Monolithic is configured with `multitenancy.enabled: true` and `ingestion.otlp.http.tls.enabled: true`, the gateway forwards OTLP HTTP traffic to the Tempo receiver using plain HTTP instead of HTTPS. As a consequence, the connection fails with a `connection reset by peer` error because the receiver expects TLS connections. OTLP gRPC ingestion through the gateway is not affected. Jira issue: https://issues.redhat.com/browse/TRACING-5973.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Threats
Impact
Moderate
A flaw was found in the `github.com/antchfx/xpath` component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the `logicalQuery.Select` function, leading to 100% CPU utilization and a Denial of Service (DoS) condition for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Threats
Impact
Important
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x | — |
Workaround
|
Threats
Impact
Important
References
92 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 has been released",
"title": "Topic"
},
{
"category": "general",
"text": "This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements and bug fixes.\n\n\nBreaking changes:\n\n* None.\n\n\nDeprecations:\n\n* None.\n\n\nTechnology Preview features:\n\n* None.\n\n\nEnhancements:\n\n* None.\n\n\nBug fixes:\n\n* gRPC-Go authorization bypass vulnerability fix: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 :path pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed :path that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the :path pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.\n\n* XPath component fix: Previously, the github.com/antchfx/xpath component did not properly handle certain Boolean XPath expressions. A remote attacker could submit a crafted expression that caused an infinite loop, resulting in 100% CPU utilization and a denial-of-service condition. With this update, the XPath component correctly processes Boolean expressions that evaluate to true. The system no longer enters an infinite loop when handling these expressions. For more information, see https://access.redhat.com/security/cve/cve-2026-4645.\n\n* Go JOSE denial-of-service vulnerability fix: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial-of-service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.\n\n* Lodash _.template function fix: Previously, the lodash _.template function validated the variable option but did not validate options.imports key names. Both options passed values to the same code execution path. An attacker with the ability to control options.imports key names or pollute Object.prototype could exploit this gap to execute arbitrary code. With this update, lodash validates options.imports key names by using the same rules applied to the variable option. The _.template function rejects invalid key names and prevents code injection through this path. For more information, see https://access.redhat.com/security/cve/cve-2026-4800.\n\n* Go crypto/x509 and crypto/tls packages fix: Previously, the Go standard library crypto/x509 and crypto/tls packages did not limit the number of intermediate certificates processed during certificate chain building. An attacker could provide an excessive number of intermediate certificates, causing the system to perform an uncontrolled amount of work and resulting in a denial-of-service condition. With this update, the packages limit the number of intermediate certificates accepted during certificate chain validation. The system rejects certificate chains that exceed this limit. For more information, see https://access.redhat.com/security/cve/cve-2026-32280.\n\n* Go Root.Chmod function fix: Previously, the Root.Chmod function in the Go standard library internal/syscall/unix package had a race condition between checking and modifying a target file. An attacker could replace the target with a symbolic link after the check but before the operation completed, causing the permission change to apply to the linked file instead. This allowed an attacker to bypass directory restrictions and change permissions on unintended files. With this update, the Root.Chmod function prevents this race condition. The function no longer follows symbolic links that replace the target during execution. For more information, see https://access.redhat.com/security/cve/cve-2026-32282.\n\n* Go crypto/x509 package fix: Previously, the Go crypto/x509 package applied excluded DNS constraints to wildcard Subject Alternative Names (SANs) in a case-sensitive manner. An attacker could bypass certificate validation by using a different case in the wildcard SAN than the excluded DNS constraint specified. This allowed the system to accept a malicious certificate that should have been rejected. With this update, the package applies DNS constraints case-insensitively when validating wildcard SANs. Certificate chain verification correctly rejects certificates that match excluded DNS constraints regardless of case. For more information, see https://access.redhat.com/security/cve/cve-2026-33810.\n\n* Go crypto/tls component fix: Previously, the Go crypto/tls component did not re-validate certificates against updated certificate authority (CA) settings during TLS session resumption. If CA settings changed between the initial handshake and a resumed session, the component used the original CA settings. An attacker could exploit this to bypass certificate validation and establish a connection that should have been rejected. With this update, the component validates certificates against the current CA settings during session resumption. Resumed sessions that no longer meet CA requirements are rejected. For more information, see https://access.redhat.com/security/cve/cve-2025-68121.\n\n* jsonparser Delete function fix: Previously, the Delete function in the github.com/buger/jsonparser component did not validate offsets when processing malformed JSON input. A remote attacker could provide crafted JSON data that caused a runtime panic, resulting in a denial-of-service condition. With this update, the Delete function validates offsets before processing. The function handles malformed JSON input as expected. For more information, see https://access.redhat.com/security/cve/cve-2026-32285.\n\n* path-to-regexp component fix: Previously, the path-to-regexp component did not limit the complexity of generated regular expressions. A remote attacker could provide input containing multiple sequential optional groups, causing exponential growth in the generated expression and excessive resource consumption. This resulted in a denial-of-service condition. With this update, the component limits regular expression complexity. Input patterns with sequential optional groups no longer cause excessive resource consumption. For more information, see https://access.redhat.com/security/cve/cve-2026-4926.\n\n* Go net/url.Parse function fix: Previously, the Go net/url.Parse function did not properly validate the host component of URLs containing IP-literals. The function ignored invalid characters preceding IP-literals and accepted URLs that should have been rejected. With this update, the function validates the entire host component. URLs with invalid characters before IP-literals are rejected as malformed. For more information, see https://access.redhat.com/security/cve/cve-2026-25679.\n\n* Go crypto/x509 module fix: Previously, the Go crypto/x509 module did not apply all email address constraints when validating certificates. If a certificate contained multiple email constraints with the same local portion but different domain portions, the module only enforced the last constraint and ignored the others. With this update, the module applies all email address constraints during certificate chain validation. Certificates are validated against every specified email constraint. For more information, see https://access.redhat.com/security/cve/cve-2026-27137.\n\n\nKnown issues:\n\n* Gateway fails to forward OTLP HTTP traffic when receiver TLS is enabled. When Tempo Monolithic is configured with `multitenancy.enabled: true` and `ingestion.otlp.http.tls.enabled: true`, the gateway forwards OTLP HTTP traffic to the Tempo receiver using plain HTTP instead of HTTPS. As a consequence, the connection fails with a `connection reset by peer` error because the receiver expects TLS connections. OTLP gRPC ingestion through the gateway is not affected. Jira issue: https://issues.redhat.com/browse/TRACING-5973.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:9385",
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32285",
"url": "https://access.redhat.com/security/cve/CVE-2026-32285"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4645",
"url": "https://access.redhat.com/security/cve/CVE-2026-4645"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9385.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release",
"tracking": {
"current_release_date": "2026-06-30T12:22:22+00:00",
"generator": {
"date": "2026-06-30T12:22:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:9385",
"initial_release_date": "2026-04-21T15:08:38+00:00",
"revision_history": [
{
"date": "2026-04-21T15:08:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-21T15:08:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T12:22:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.9.3",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-operator-bundle@sha256%3Ad180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776674955"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Aa5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3Ac939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Aa66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435643"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435608"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Ab68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Ac7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435565"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3Aee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435613"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776435680"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-4645",
"discovery_date": "2026-03-23T06:02:52.120840+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `github.com/antchfx/xpath` component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the `logicalQuery.Select` function, leading to 100% CPU utilization and a Denial of Service (DoS) condition for the affected system.",
"title": "Vulnerability description"
},
{
"category": "other",
"text": "A denial of service vulnerability was discovered in `github.com/antchfx/xpath`, with Important severity. Systems processing untrusted XPath expressions are vulnerable to an infinite loop, leading to 100% CPU utilization which would impact normal operations of the system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4645"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4645"
}
],
"release_date": "2026-03-17T20:58:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict the processing of untrusted or unvalidated XPath expressions by applications which utilize the `github.com/antchfx/xpath` component. Implement input validation and sanitization for all XPath expressions originating from external or untrusted sources. If possible, configure applications to only process XPath expressions from trusted sources or disable features that allow arbitrary XPath expression evaluation.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/antchfx/xpath: xpath: Denial of Service via crafted Boolean XPath expressions"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32285",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-03-26T20:01:54.925687+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32285"
},
{
"category": "external",
"summary": "RHBZ#2451846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285"
},
{
"category": "external",
"summary": "https://github.com/buger/jsonparser/issues/275",
"url": "https://github.com/buger/jsonparser/issues/275"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4514",
"url": "https://github.com/golang/vulndb/issues/4514"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4514",
"url": "https://pkg.go.dev/vuln/GO-2026-4514"
}
],
"release_date": "2026-03-26T19:40:51.837000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:08:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:034af4f19268a6ae63aa7f49ca70f0d1c0311fd269a3bdd79f337260c89ac052_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9012c42fbb769f3e186bb9ade5f5a044a38e0db7336648050def9fb2f0057c9e_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:a66154755c86d821035cf83c940401ddc2a8d45b395f3a36d58f5755de621e43_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b68e6b2f84171b46ba16b1a2e1d4e4624faacc09453cf14ca68e319e9c8b7115_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:61eacd3b26e3d12166e61a3cabe2137fb074f245ded11e1f745bb74839f077d4_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9f8e4d6c9e6784baf45513552e8be6487d30d93679043519958b6cc47255b613_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c939c718084a9f1cff2bb56f932398c58ee3968834ff31ce85c4d356423b6545_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0205c0565948891a128ed9b6d639582b20cc50123ad22a8cbbf414d4843f2fe8_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:15db63cb743ea84e1acc3d668543233b4bd566c73dc0f033ae8b43390f324764_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:63a9b773e467978769c428a538c8d75c28bfe52e069ac17d269fb7b3c5ad7f54_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:81a49b0518d578de0f8fafdb50cc844e1f6dbf1241d7a10856b8ae810fd873af_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:d180bac53d873bba131cedd40db06cd784d8dc4795d9bff85a6b33921cc1dd9c_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1c4fa975d38a317a307967887524df0c7c3117a91452730978de55a70b41153b_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:3afa5f0d4f74e4d74a74ae9f2ed1c9cdd817473f3ae074de269af9625b77643d_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:820a6bdb3262f1350e06af22121ba6d454908ac6747fa64d768226e6ff77d982_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ee7da439cd21c32b1bc419de7e6d00b13d755a7b360dfea2ff882f9b1a25aa9d_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0a70a38b8b349197a0bd807e226803976c23fda03683f3d63b0687b9bd45d540_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1dec0c1cd978d3f260d99133ac942a88e255708197f5ded6594db00082357d33_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a5befd5575eebc08f0c6ec8b928f8b5c286ebb3d2dfcdbcb0cdd696b54335299_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c7ae36b9d4c9bfb0750bdb7e9d7b897940ab5149eb670b44c1fe9b1ca7688910_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0925a2af960b4714614d3f73a14b7a2a04de655cfcedbdd843c06ea5872d1987_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:53621f808c45a6c8aec0d2df240106a41b1f48c59bb3db648d3d20bb03cb92cf_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:55635b179e701a58643a4ffc148d75ed2d1e82a383783812484e3da9b7bedaf4_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/tempo-rhel9@sha256:9a0a8a33df8e58e391d28fae62e06378c4f3c26e4d81532d38728632698f637c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:9388
Vulnerability from csaf_redhat - Published: 2026-04-21 15:19 - Updated: 2026-06-30 12:22Summary
Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.2 release
Severity
Important
Notes
Topic: Red Hat build of OpenTelemetry 3.9.2 has been released
Details: This release of the Red Hat build of OpenTelemetry provides security improvements.
Breaking changes:
* None
Deprecations:
* None
Technology Preview features:
* None
Enhancements:
* None
Bug fixes:
* XPath library vulnerability is fixed: Previously, the 'github.com/antchfx/xpath' library was vulnerable to a denial of service (DoS) attack. This issue occurred because specially crafted boolean XPath expressions that evaluated to true caused an infinite loop in the 'logicalQuery.Select' function, leading to 100% CPU utilization. With this update, the XPath library properly handles these expressions and prevents infinite loops. As a result, the system is no longer vulnerable to this DoS condition. For more information, see https://access.redhat.com/security/cve/cve-2026-32287.
* gRPC-Go authorization bypass vulnerability is fixed: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 ':path' pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed ':path' that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the ':path' pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.
* Go JOSE denial of service vulnerability is fixed: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial of service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.
Known issues:
* The filesystem scraper does not produce the `system.filesystem.inodes.usage` and `system.filesystem.usage` metrics in the Host Metrics Receiver after upgrading from Collector version 0.142.0 to 0.143.0 or later. No known workaround exists. For more information, see https://issues.redhat.com/browse/TRACING-5963.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in github.com/antchfx/xpath. An attacker could exploit this vulnerability by providing specially crafted boolean XPath expressions that evaluate to true. This can cause an infinite loop within the logicalQuery.Select function, leading to 100% CPU utilization. The consequence is a Denial of Service (DoS) condition, making the affected system unresponsive.
6.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64 | — |
Vendor Fix
fix
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x | — |
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x | — |
Workaround
|
Threats
Impact
Important
References
26 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat build of OpenTelemetry 3.9.2 has been released",
"title": "Topic"
},
{
"category": "general",
"text": "This release of the Red Hat build of OpenTelemetry provides security improvements.\n\n\nBreaking changes:\n\n* None\n\n\nDeprecations:\n\n* None\n\n\nTechnology Preview features:\n\n* None\n\n\nEnhancements:\n\n* None\n\n\nBug fixes:\n\n* XPath library vulnerability is fixed: Previously, the \u0027github.com/antchfx/xpath\u0027 library was vulnerable to a denial of service (DoS) attack. This issue occurred because specially crafted boolean XPath expressions that evaluated to true caused an infinite loop in the \u0027logicalQuery.Select\u0027 function, leading to 100% CPU utilization. With this update, the XPath library properly handles these expressions and prevents infinite loops. As a result, the system is no longer vulnerable to this DoS condition. For more information, see https://access.redhat.com/security/cve/cve-2026-32287.\n\n* gRPC-Go authorization bypass vulnerability is fixed: Previously, gRPC-Go was vulnerable to an authorization bypass attack. This issue occurred because the HTTP/2 \u0027:path\u0027 pseudo-header was not properly validated. Remote attackers could send raw HTTP/2 frames with a malformed \u0027:path\u0027 that omitted the mandatory leading slash to bypass defined security policies. With this update, gRPC-Go properly validates the \u0027:path\u0027 pseudo-header and rejects malformed requests. As a result, attackers can no longer bypass security policies to gain unauthorized access to services or disclose information. For more information, see https://access.redhat.com/security/cve/cve-2026-33186.\n\n* Go JOSE denial of service vulnerability is fixed: Previously, the Go JOSE library for handling JSON Web Encryption (JWE) objects was vulnerable to a denial of service (DoS) attack. This issue occurred because the application failed when decrypting a specially crafted JWE object that specified a key wrapping algorithm but contained an empty encrypted key field. With this update, Go JOSE properly validates the encrypted key field before decryption. As a result, the application no longer crashes when processing malformed JWE objects, and the service remains available to legitimate users. For more information, see https://access.redhat.com/security/cve/cve-2026-34986.\n\n\nKnown issues:\n\n* The filesystem scraper does not produce the `system.filesystem.inodes.usage` and `system.filesystem.usage` metrics in the Host Metrics Receiver after upgrading from Collector version 0.142.0 to 0.143.0 or later. No known workaround exists. For more information, see https://issues.redhat.com/browse/TRACING-5963.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:9388",
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32287",
"url": "https://access.redhat.com/security/cve/CVE-2026-32287"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9388.json"
}
],
"title": "Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.2 release",
"tracking": {
"current_release_date": "2026-06-30T12:22:22+00:00",
"generator": {
"date": "2026-06-30T12:22:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:9388",
"initial_release_date": "2026-04-21T15:19:05+00:00",
"revision_history": [
{
"date": "2026-04-21T15:19:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-21T15:19:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T12:22:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.9.3",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-operator-bundle@sha256%3A333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776245088"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3Abcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185328"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3Aff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185328"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3A9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185328"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-collector-rhel9@sha256%3A9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-rhel9-operator@sha256%3A270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185352"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x",
"product_id": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opentelemetry-target-allocator-rhel9@sha256%3Aca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt\u0026tag=1776185328"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64 as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x as a component of Red Hat OpenShift distributed tracing 3.9.3",
"product_id": "Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.9.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-32287",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-03-26T20:02:37.779428+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451856"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/antchfx/xpath. An attacker could exploit this vulnerability by providing specially crafted boolean XPath expressions that evaluate to true. This can cause an infinite loop within the logicalQuery.Select function, leading to 100% CPU utilization. The consequence is a Denial of Service (DoS) condition, making the affected system unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32287"
},
{
"category": "external",
"summary": "RHBZ#2451856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32287",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32287"
},
{
"category": "external",
"summary": "https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494",
"url": "https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494"
},
{
"category": "external",
"summary": "https://github.com/antchfx/xpath/issues/121",
"url": "https://github.com/antchfx/xpath/issues/121"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4526",
"url": "https://github.com/golang/vulndb/issues/4526"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4526",
"url": "https://pkg.go.dev/vuln/GO-2026-4526"
}
],
"release_date": "2026-03-26T19:40:52.142000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:19:05+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:19:05+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-21T15:19:05+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:7c84cdf31817fe4584a5e8a1589f4c0f09f22aed8f75e6d694143c6a6065d330_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:9ef57417e79d78ca1a623357b5a58c384fdf3a2c954c3587b76cce8983a725e4_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:ff8b32e89a8550c5fac876f5869df8e93ba99b44e49d079a3375f638bc47dfd6_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-operator-bundle@sha256:333a0122b7f40e70c2fa34b7045cd119b2887612e247346a6f344bc998e363ea_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:270839ae96516ba23c72b7e9edd00df35c675e9043382233119b7f516cad858c_s390x",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:529bf355324a078400ca9e9a2dca7b641656cf7b5e735469c5253a2633bf1857_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5496393c7ed9c8f47de5817bf7f2432608b07342e5bfa4f30f4974d1e2a160fd_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-rhel9-operator@sha256:5bfd16612872059e740b630ad3aee5bcad70e91ff197df32fd04c437cc2e3506_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:28a837153e4b73c79ee93082656410084dee8d2a2a52146ad9a41d6fc8623dcb_arm64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:9c862dc8f1ec9c5c2ae2e636a52e62c119e27ce4496343ce07d45e431c93cf99_ppc64le",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:bcbe4340cb78e1bf4452f398f879ddb77a0bd18da35c4780f178887828152497_amd64",
"Red Hat OpenShift distributed tracing 3.9.3:registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9@sha256:ca369b5151f39ae58f0ad3a27722cbf2abda1fffa68176b0075695f583de7ba1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…