Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-39821 (GCVE-0-2026-39821)
Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-08-28 12:04
VLAI
EPSS
VEX
Title
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
Summary
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
Severity
9.6 (Critical)
8.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-23 03:55 UTC
CWE
- CWE-1289 - Improper Validation of Unsafe Equivalence in Input
Assigner
References
138 references
Impacted products
296 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Go standard library | net/http |
Affected:
0 , < 1.25.13
(semver)
Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver) |
guessed | |
| Go standard library | net/http/internal/http2 |
Affected:
0 , < 1.25.13
(semver)
Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver) |
guessed | |
| golang.org/x/net | golang.org/x/net/idna |
Affected:
0 , < 0.55.0
(semver)
|
guessed | |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:1.6.6-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:3.7.1-5.el10_2.5 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.152.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:5.3.0-7.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:10.2.6-27.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.26.5-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
1:0.3.8-6.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.4.9.2-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.0.1-2.el10_2.3 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.5-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.4.7-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
1:0.3.2-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.152.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:5.3.0-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:2.21.0-2.el10_0.3 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:0.11-1.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:3.4.1-11.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:9.2.10-31.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:5.1.1-16.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260710105056.a3795dee , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:0.2.5-9.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:3.7.1-4.el9_8.1 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.152.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:10.2.6-23.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:5.1.1-17.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.26.5-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
1:0.2.7-8.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
1:0.2.2-1.el9_2.4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:0.152.1-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:1.26.5-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:2.17.0-2.el9_4.1 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:101.3-4.el9_4.5 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
1:0.2.4-9.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:1.26.5-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:10.2.6-22.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:2.21.0-7.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.152.1-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
1:0.2.7-1.el9_6.5 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:5.1.1-15.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:132.2-10.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.16::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:3.3.23-22.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 |
Unaffected:
0:0.0.4-1.el8sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el9 |
||
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.17::el9 |
||
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | RHEM 1.1 for RHEL 10 |
Unaffected:
0:1.1.3-1.el10em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | RHEM 1.1 for RHEL 9 |
Unaffected:
0:1.1.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Streams for Apache Kafka 3.2.1 |
Unaffected:
danielqsj-kafka_exporter , < *
(rpm)
cpe:/a:redhat:amq_streams:3.2::el9 |
||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 |
Unaffected:
1786613805 , < *
(rpm)
cpe:/a:redhat:cert_manager:1.19::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782840519 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839981 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839193 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782838753 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839279 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782840539 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782844225 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839658 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782838476 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | DevWorkspace Operator 0.42 |
Unaffected:
1782401674 , < *
(rpm)
cpe:/a:redhat:devworkspace:0.42::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1785418851 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.2 |
Unaffected:
1784747813 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 |
Unaffected:
1782408807 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.5 |
Unaffected:
1786645107 , < *
(rpm)
cpe:/a:redhat:logging:6.5::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786912006 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1783332008 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el8 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1783333268 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1783985999 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782477094 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782308518 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784737366 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784306906 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1783260894 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | Multicluster Global Hub 1.5.6 |
Unaffected:
1784127491 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
||
| Red Hat | Multicluster Global Hub 1.7.0 |
Unaffected:
1784768332 , < *
(rpm)
Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785180878 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.6 |
Unaffected:
1784058822 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.6::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787685239 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782383730 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782156698 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782157632 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782157829 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782157630 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782382580 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782383255 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782488873 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782157507 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782396604 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782382711 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782157546 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782157471 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782157018 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782156920 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782374537 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782383676 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782156860 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782465412 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784652040 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784638644 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784740143 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1781686458 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.11 |
Unaffected:
1783352589 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.9 |
Unaffected:
1781686446 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1783962464 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 |
Unaffected:
1783917963 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502438 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194574 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127736 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782804957 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782758407 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782758410 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782754093 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782744816 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782758409 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782744830 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.25.11-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.4-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 |
Unaffected:
1786483782 , < *
(rpm)
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
||
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783953372 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
||
| Red Hat | Red Hat Migration Toolkit for Applications 8.1 |
Unaffected:
1785171639 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.1::el9 |
||
| Red Hat | Red Hat Migration Toolkit for Applications 8.2 |
Unaffected:
1784211378 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.2::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.4.2 |
Unaffected:
1784061472 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.6.0 |
Unaffected:
1784152046 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1783544461 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1784004914 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1783946386 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787051722 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787102977 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1786630755 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1786630724 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1786630124 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1786611780 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1786612055 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787153683 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787088234 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787250508 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787251550 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1786611759 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787251250 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1786612219 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787250617 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787090180 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787089049 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift AI 3.4 |
Unaffected:
1787361677 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.4::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.3 |
Unaffected:
1783057515 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.3 |
Unaffected:
1783057868 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1784121108 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783612119 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786705347 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706101 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786705558 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786705646 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706138 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786705741 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786705777 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786705802 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786705938 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706577 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706125 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706177 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706188 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706679 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706357 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706612 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706644 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706659 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1786706880 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932114 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782931768 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932104 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783536000 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783535989 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783536515 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932521 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783018461 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783018421 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932812 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537001 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932919 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537586 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932969 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933015 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933042 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537392 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933235 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933251 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537955 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933417 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537742 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933602 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783019377 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934054 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934036 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934284 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782991491 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1784775772 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1784775770 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1784775834 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1784777166 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1784775793 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1784775768 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 |
Unaffected:
1784775782 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift GitOps 1.19 |
Unaffected:
1782292352 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.19::el8 |
||
| Red Hat | Red Hat OpenShift GitOps 1.2 |
Unaffected:
1782383826 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.20::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1782287580 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201833 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201537 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201812 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782201466 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.12 |
Unaffected:
1785202723 , < *
(rpm)
cpe:/a:redhat:workload_availability_nhc:0.12::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.13 |
Unaffected:
1785203036 , < *
(rpm)
cpe:/a:redhat:workload_availability_snr:0.13::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.3 |
Unaffected:
1785203474 , < *
(rpm)
cpe:/a:redhat:workload_availability_sbr:0.3::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.7 |
Unaffected:
1785203508 , < *
(rpm)
cpe:/a:redhat:workload_availability_mdr:0.7::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.8 |
Unaffected:
1785203079 , < *
(rpm)
cpe:/a:redhat:workload_availability_far:0.8::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 5.7 |
Unaffected:
1785202847 , < *
(rpm)
cpe:/a:redhat:workload_availability_nmo:5.7::el9 |
||
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1783750447 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
||
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1783751865 , < *
(rpm)
Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8 |
||
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1784351966 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
||
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1783955846 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
||
| Red Hat | Red Hat Quay 3.17 |
Unaffected:
1786181981 , < *
(rpm)
cpe:/a:redhat:quay:3.17::el9 |
||
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1784125838 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
||
| Red Hat | Red Hat Satellite 6.18 |
Unaffected:
1785923308 , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 |
Unaffected:
1785929994 , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Web Terminal 1.11 |
Unaffected:
1784296203 , < *
(rpm)
cpe:/a:redhat:webterminal:1.11::el9 |
||
| Red Hat | Red Hat Web Terminal 1.12 |
Unaffected:
1784247610 , < *
(rpm)
cpe:/a:redhat:webterminal:1.12::el9 |
||
| Red Hat | Red Hat Web Terminal 1.13 |
Unaffected:
1784296127 , < *
(rpm)
cpe:/a:redhat:webterminal:1.13::el9 |
||
| Red Hat | Red Hat Web Terminal 1.14 |
Unaffected:
1784296114 , < *
(rpm)
cpe:/a:redhat:webterminal:1.14::el9 |
||
| Red Hat | Red Hat Web Terminal 1.15 |
Unaffected:
1784296033 , < *
(rpm)
cpe:/a:redhat:webterminal:1.15::el9 |
||
| Red Hat | Red Hat Web Terminal 1.16 |
Unaffected:
1784295767 , < *
(rpm)
cpe:/a:redhat:webterminal:1.16::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | Compliance Operator |
cpe:/a:redhat:openshift_compliance_operator:1
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4
|
||
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator
|
||
| Red Hat | ExternalDNS Operator |
cpe:/a:redhat:ext_dns_optr:1
|
||
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1
|
||
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0
|
||
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1
|
||
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
cpe:/a:redhat:lvms:5 |
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0
|
||
| Red Hat | Multiarch Tuning Operator |
cpe:/a:redhat:multiarch_tuning_operator
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0
|
||
| Red Hat | OpenShift API for Data Protection |
cpe:/a:redhat:openshift_api_data_protection:1
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat Ceph Storage 5 |
cpe:/a:redhat:ceph_storage:5
|
||
| Red Hat | Red Hat Ceph Storage 6 |
cpe:/a:redhat:ceph_storage:6
|
||
| Red Hat | Red Hat Ceph Storage 8 |
cpe:/a:redhat:ceph_storage:8
|
||
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9
|
||
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 |
cpe:/a:redhat:certifications:9
|
||
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
||
| Red Hat | Red Hat Developer Hub |
cpe:/a:redhat:rhdh:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat Hardened Images |
cpe:/a:redhat:hummingbird:1
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Service Interconnect 1 |
cpe:/a:redhat:service_interconnect:1
|
||
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-39821",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-23T03:55:58.522682Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1289",
"description": "CWE-1289 Improper Validation of Unsafe Equivalence in Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-27T13:13:15.606Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.7.1-5.el10_2.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.3.0-7.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:10.2.6-27.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.3.8-6.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.9.2-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "go-fdo-server",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.1-2.el10_2.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.7-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.3.2-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.3.0-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.21.0-2.el10_0.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-script",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.11-1.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.4.1-11.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:9.2.10-31.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.1.1-16.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "go-toolset:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260710105056.a3795dee",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.5-9.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.7.1-4.el9_8.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:10.2.6-23.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.1.1-17.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.7-8.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.2-1.el9_2.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.17.0-2.el9_4.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:101.3-4.el9_4.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.4-9.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:10.2.6-22.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.21.0-7.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.7-1.el9_6.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.1.1-15.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:132.2-10.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el8"
],
"defaultStatus": "affected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.23-22.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el8"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el8sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.18 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.19 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el10em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github",
"product": "Streams for Apache Kafka 3.2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "danielqsj-kafka_exporter",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cert_manager:1.19::el9"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "Cert Manager support for Red Hat OpenShift release 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786613805",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782840519",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839981",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839193",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782838753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839279",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782840539",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782844225",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839658",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782838476",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:devworkspace:0.42::el9"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "DevWorkspace Operator 0.42",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782401674",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785418851",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784747813",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782408807",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.5::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786645107",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786912006",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783332008",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783333268",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783985999",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782477094",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782308518",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784737366",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784306906",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783260894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.5.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127491",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.7.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784768332",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1785775948",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785180878",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784058822",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/thanos-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787685239",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-grafana-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782383730",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782156698",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-prometheus-config-reloader-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157632",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-prometheus-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157829",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/cluster-backup-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782382580",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/grafana-dashboard-loader-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782383255",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/kube-rbac-proxy-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782488873",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/kube-state-metrics-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157507",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/metrics-collector-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782396604",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-observability-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782382711",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/node-exporter-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157546",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/observatorium-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157471",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/observatorium-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157018",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/prometheus-alertmanager-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782156920",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/prometheus-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782374537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/rbac-query-proxy-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782383676",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/thanos-receive-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782156860",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/thanos-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782465412",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784652040",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multiclusterhub-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784638644",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784740143",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686458",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel9",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783352589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686446",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783962464",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783917963",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/disk-image-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782804957",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-aws-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782758407",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-azure-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782758410",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-azure-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782754093",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782744816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gcp-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782758409",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782744830",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-25-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.25.11-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.4-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786483782",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-controller-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783953372",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-cli-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785171639",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-cli-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784211378",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784061472",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784152046",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kueue-controller-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783544461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhel9-operator",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784004914",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-training-operator-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783946386",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-feast-operator-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787051722",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kube-auth-proxy-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787102977",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786630755",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786630724",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786630124",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786611780",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786612055",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-maas-api-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787153683",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mlflow-operator-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787088234",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787250508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787251550",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786611759",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787251250",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786612219",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787250617",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-spark-operator-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787090180",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trainer-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787089049",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-training-operator-rhel9",
"product": "Red Hat OpenShift AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787361677",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-controller-rhel9",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057515",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057868",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-rhel9-operator",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784121108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783612119",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705347",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706101",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705646",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706138",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705741",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705777",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705802",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786705938",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706577",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706125",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706177",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706188",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706679",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706357",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706612",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706644",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706659",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786706880",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782931768",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/devicefinder-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932104",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783536000",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783535989",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783536515",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932521",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783018461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783018421",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-blackbox-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537001",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932919",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537586",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932969",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933015",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933042",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-drbd-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537392",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933235",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933251",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537955",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933417",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537742",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933602",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783019377",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-volsync-plugin-mover-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934054",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-volsync-plugin-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934284",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782991491",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-gateway-opa-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784775772",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-gateway-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784775770",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-jaeger-query-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784775834",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-operator-bundle",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784777166",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-query-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784775793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784775768",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-rhel9-operator",
"product": "Red Hat OpenShift distributed tracing 3.10.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784775782",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782292352",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782383826",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782287580",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201833",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201466",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0.12::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785202723",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_snr:0.13::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/self-node-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_sbr:0.3::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/storage-based-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203474",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0.7::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0.8::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203079",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_nmo:5.7::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-maintenance-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 5.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785202847",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783750447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783751865",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784353904",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784351966",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783955846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.17::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786181981",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125838",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785923308",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785929994",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296203",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784247610",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296033",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.16::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784295767",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "Compliance Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"packageName": "dvo/deployment-validation-rhel8-operator",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "affected",
"packageName": "edo/external-dns-rhel9",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "affected",
"packageName": "edo/external-dns-rhel9-operator",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/far-operator-0-8",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "affected",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4",
"cpe:/a:redhat:lvms:5"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/mdr-operator-0-7",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multiarch_tuning_operator"
],
"defaultStatus": "affected",
"packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
"product": "Multiarch Tuning Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-agent-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-controller-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-api-provider-agent-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-api-provider-kubevirt-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-proxy-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/image-based-install-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "redhat-user-workloads/nhc-operator-0-12",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1"
],
"defaultStatus": "unaffected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "OpenShift API for Data Protection",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "OpenShift API for Data Protection",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/logic-rhel9-operator",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "affected",
"packageName": "openshift-power-monitoring/kepler-rhel9",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-permission-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-cli-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-cluster-permission-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-must-gather-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-search-indexer-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-search-v2-api-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-search-v2-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/cert-policy-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/config-policy-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/governance-policy-propagator-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/insights-client-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/insights-metrics-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/klusterlet-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/memcached-exporter-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/search-collector-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/subctl-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/submariner-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-5-dashboard-rhel8",
"product": "Red Hat Ceph Storage 5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-6-dashboard-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:8"
],
"defaultStatus": "affected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "affected",
"packageName": "rhceph/alloy-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"packageName": "redhat-certification-preflight",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/authorino-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhdh:1"
],
"defaultStatus": "unknown",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-client",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/buildah",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/conmon",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/containernetworking-plugins",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/podman",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/skopeo",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/toolbox",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "golang-fips1.25",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-codeflare-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kf-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-maas-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mm-rest-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-serving-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel8-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "atomic-openshift-service-idler",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon-rs",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-tools",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "golang-github-prometheus-promu",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/frr-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cli",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-kuryr",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-crio-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "rh-osbs/openshift-golang-builder",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "affected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel8/osp-director-agent",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "collectd-libpod-stats",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-openstack-k8s-operators-os-diff",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/ovn-rhel9-operator",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite:el8/yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-security-profiles-rhel8-operator",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-22T15:01:21.462Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1289",
"description": "Improper Validation of Unsafe Equivalence in Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-28T12:04:25.254Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"name": "RHBZ#2480756",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42080"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54191"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54580"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34789"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42082"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57845"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42240"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56143"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59546"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53413"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53374"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30855"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46395"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37436"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35827"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35826"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34357"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39005"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39573"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38995"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30853"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35830"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35831"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41930"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60354"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59549"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53412"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59562"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60315"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51112"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56223"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:52826"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53415"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57541"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54401"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30854"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37435"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35828"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35829"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34359"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39879"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36808"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34364"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56340"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53530"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60387"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26547"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26546"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42132"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33531"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33524"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50300"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60520"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35994"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35993"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44624"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56431"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37387"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54395"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51341"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36105"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36167"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36883"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
},
{
"lang": "en",
"value": "RHSA-2026:54580: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:34789: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:56143: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:59546: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:30855: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:37436: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:35827: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:35826: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:30853: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:35830: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:35831: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:59549: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:59562: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:56223: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:52826: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:57541: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:30854: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:37435: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:35828: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:35829: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
},
{
"lang": "en",
"value": "RHSA-2026:36808: DevWorkspace Operator 0.42"
},
{
"lang": "en",
"value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"lang": "en",
"value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
},
{
"lang": "en",
"value": "RHSA-2026:42852: Multicluster Global Hub 1.5.6"
},
{
"lang": "en",
"value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
},
{
"lang": "en",
"value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"lang": "en",
"value": "RHSA-2026:26546: Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:33531: Red Hat Enterprise Linux AI 3.4"
},
{
"lang": "en",
"value": "RHSA-2026:33524: Red Hat Enterprise Linux AI 3.4"
},
{
"lang": "en",
"value": "RHSA-2026:23262: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:23264: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
},
{
"lang": "en",
"value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
},
{
"lang": "en",
"value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
},
{
"lang": "en",
"value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
},
{
"lang": "en",
"value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
},
{
"lang": "en",
"value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
},
{
"lang": "en",
"value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
},
{
"lang": "en",
"value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
},
{
"lang": "en",
"value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
},
{
"lang": "en",
"value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
},
{
"lang": "en",
"value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
},
{
"lang": "en",
"value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
},
{
"lang": "en",
"value": "RHSA-2026:44624: Red Hat OpenShift distributed tracing 3.10.1"
},
{
"lang": "en",
"value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:42146: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:43052: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:42796: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:41066: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:54395: Red Hat Quay 3.17"
},
{
"lang": "en",
"value": "RHSA-2026:41031: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:40262: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:51341: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:51194: Red Hat Satellite 6.19"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
},
{
"lang": "en",
"value": "RHSA-2026:41030: Red Hat multicluster global hub 1.4.2"
},
{
"lang": "en",
"value": "RHSA-2026:44622: Red Hat multicluster global hub 1.6.0"
},
{
"lang": "en",
"value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
},
{
"lang": "en",
"value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:36105: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:36167: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-22T16:00:52.844Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-22T15:01:21.462Z",
"value": "Made public."
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"workarounds": [
{
"lang": "en",
"value": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "net/http",
"product": "net/http",
"programRoutines": [
{
"name": "idnaASCII"
},
{
"name": "Client.CloseIdleConnections"
},
{
"name": "Client.Do"
},
{
"name": "Client.Get"
},
{
"name": "Client.Head"
},
{
"name": "Client.Post"
},
{
"name": "Client.PostForm"
},
{
"name": "ClientConn.Close"
},
{
"name": "ClientConn.RoundTrip"
},
{
"name": "Get"
},
{
"name": "Head"
},
{
"name": "Post"
},
{
"name": "PostForm"
},
{
"name": "Transport.CloseIdleConnections"
},
{
"name": "Transport.NewClientConn"
},
{
"name": "Transport.RoundTrip"
},
{
"name": "http1ClientConn.Close"
},
{
"name": "http1ClientConn.RoundTrip"
},
{
"name": "http2ClientConn.RoundTrip"
},
{
"name": "http2RoundTripper.RoundTrip"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.13",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.6",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
},
{
"lessThan": "1.27.0-rc.3",
"status": "affected",
"version": "1.27.0-0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "net/http/internal/http2",
"product": "net/http/internal/http2",
"programRoutines": [
{
"name": "authorityAddr"
},
{
"name": "Transport.AddConn"
},
{
"name": "Transport.RoundTrip"
},
{
"name": "Transport.RoundTripOpt"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.13",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.6",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
},
{
"lessThan": "1.27.0-rc.3",
"status": "affected",
"version": "1.27.0-0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "golang.org/x/net/idna",
"product": "golang.org/x/net/idna",
"programRoutines": [
{
"name": "Profile.process"
},
{
"name": "Profile.ToASCII"
},
{
"name": "Profile.ToUnicode"
},
{
"name": "ToASCII"
},
{
"name": "ToUnicode"
}
],
"vendor": "golang.org/x/net",
"versions": [
{
"lessThan": "0.55.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "KC1zs4 (https://github.com/KC1zs4)"
},
{
"lang": "en",
"value": "Longwei Wang (https://github.com/gn00295120)"
}
],
"descriptions": [
{
"lang": "en",
"value": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-1289: Improper Validation of Unsafe Equivalence in Input",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-21T21:01:48.612Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/cl/767220"
},
{
"url": "https://go.dev/issue/78760"
},
{
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"title": "Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-39821",
"datePublished": "2026-05-22T15:01:21.462Z",
"dateReserved": "2026-04-07T18:13:03.526Z",
"dateUpdated": "2026-08-28T12:04:25.254Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-39821",
"date": "2026-08-28",
"epss": "0.00692",
"percentile": "0.49917"
},
"microsoft_vex": {
"current_release_date": "2026-06-19T14:40:22.000Z",
"cve": "CVE-2026-39821",
"id": "msrc_CVE-2026-39821",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:fixed": "50",
"product_status:known_affected": "52",
"product_status:known_not_affected": "4",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-39821.json",
"version": "11"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-39821\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-05-22T16:16:20.410\",\"lastModified\":\"2026-08-28T16:17:48.517\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\\\"xn--example-.com\\\") incorrectly returns the name \\\"example.com\\\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \\\"example.com\\\" but permit \\\"xn--example-.com\\\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \\\"example.com\\\".\"},{\"lang\":\"es\",\"value\":\"Las funciones ToASCII y ToUnicode aceptan incorrectamente etiquetas codificadas en Punycode que se decodifican a una etiqueta solo ASCII. Por ejemplo, ToUnicode(\u0027xn--example-.com\u0027) devuelve incorrectamente el nombre \u0027example.com\u0027 en lugar de un error. Este comportamiento puede conducir a una escalada de privilegios en programas que utilizan el paquete idna. Por ejemplo, un programa que realiza comprobaciones de privilegios en el nombre de host ASCII puede rechazar \u0027example.com\u0027 pero permitir \u0027xn--example-.com\u0027. Si ese programa convierte posteriormente el nombre de host ASCII a Unicode, permitir\u00e1 el acceso inadvertidamente al nombre Unicode \u0027example.com\u0027.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"net/http\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"net/http\",\"programRoutines\":[{\"name\":\"idnaASCII\"},{\"name\":\"Client.CloseIdleConnections\"},{\"name\":\"Client.Do\"},{\"name\":\"Client.Get\"},{\"name\":\"Client.Head\"},{\"name\":\"Client.Post\"},{\"name\":\"Client.PostForm\"},{\"name\":\"ClientConn.Close\"},{\"name\":\"ClientConn.RoundTrip\"},{\"name\":\"Get\"},{\"name\":\"Head\"},{\"name\":\"Post\"},{\"name\":\"PostForm\"},{\"name\":\"Transport.CloseIdleConnections\"},{\"name\":\"Transport.NewClientConn\"},{\"name\":\"Transport.RoundTrip\"},{\"name\":\"http1ClientConn.Close\"},{\"name\":\"http1ClientConn.RoundTrip\"},{\"name\":\"http2ClientConn.RoundTrip\"},{\"name\":\"http2RoundTripper.RoundTrip\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.13\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.6\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.27.0-0\",\"lessThan\":\"1.27.0-rc.3\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Go standard library\",\"product\":\"net/http/internal/http2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"net/http/internal/http2\",\"programRoutines\":[{\"name\":\"authorityAddr\"},{\"name\":\"Transport.AddConn\"},{\"name\":\"Transport.RoundTrip\"},{\"name\":\"Transport.RoundTripOpt\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.13\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.6\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.27.0-0\",\"lessThan\":\"1.27.0-rc.3\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"golang.org/x/net\",\"product\":\"golang.org/x/net/idna\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"golang.org/x/net/idna\",\"programRoutines\":[{\"name\":\"Profile.process\"},{\"name\":\"Profile.ToASCII\"},{\"name\":\"Profile.ToUnicode\"},{\"name\":\"ToASCII\"},{\"name\":\"ToUnicode\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.55.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:1.6.6-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:3.7.1-5.el10_2.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:5.3.0-7.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:10.2.6-27.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.26.5-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"1:0.3.8-6.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.4.9.2-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"go-fdo-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.0.1-2.el10_2.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.5-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.4.7-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"1:0.3.2-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:5.3.0-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:2.21.0-2.el10_0.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-script\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:0.11-1.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:3.4.1-11.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:9.2.10-31.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:5.1.1-16.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260710105056.a3795dee\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:0.2.5-9.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:3.7.1-4.el9_8.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:10.2.6-23.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:5.1.1-17.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"1:0.2.7-8.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"1:0.2.2-1.el9_2.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:2.17.0-2.el9_4.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:101.3-4.el9_4.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"1:0.2.4-9.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:10.2.6-22.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:2.21.0-7.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"1:0.2.7-1.el9_6.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:5.1.1-15.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:132.2-10.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el8\"],\"versions\":[{\"version\":\"0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el8\"],\"versions\":[{\"version\":\"0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:3.3.23-22.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el8\"],\"versions\":[{\"version\":\"0:0.0.4-1.el8sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.17 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.17::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"0:1.1.3-1.el10em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"0:1.1.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Streams for Apache Kafka 3.2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3.2::el9\"],\"versions\":[{\"version\":\"danielqsj-kafka_exporter\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cert Manager support for Red Hat OpenShift release 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1.19::el9\"],\"versions\":[{\"version\":\"1786613805\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782840519\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839981\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839193\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782838753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839279\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782840539\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782844225\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839658\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782838476\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"DevWorkspace Operator 0.42\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace:0.42::el9\"],\"versions\":[{\"version\":\"1782401674\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1785418851\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1784747813\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1782408807\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.5::el9\"],\"versions\":[{\"version\":\"1786645107\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786912006\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"],\"versions\":[{\"version\":\"1783332008\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1783333268\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1783985999\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/kube-rbac-proxy-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782477094\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782308518\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784737366\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784306906\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1783260894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"],\"versions\":[{\"version\":\"1784127491\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.7.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"],\"versions\":[{\"version\":\"1784768332\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1785775948\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785180878\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"],\"versions\":[{\"version\":\"1784058822\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/thanos-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787685239\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/acm-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782383730\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/acm-multicluster-observability-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782156698\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/acm-prometheus-config-reloader-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782157632\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/acm-prometheus-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782157829\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/cluster-backup-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782157630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/endpoint-monitoring-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782382580\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/grafana-dashboard-loader-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782383255\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/kube-rbac-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782488873\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/kube-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782157507\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/metrics-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782396604\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-observability-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782382711\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/node-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782157546\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/observatorium-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782157471\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/observatorium-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782157018\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/prometheus-alertmanager-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782156920\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/prometheus-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782374537\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/rbac-query-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782383676\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/thanos-receive-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782156860\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/thanos-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782465412\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784652040\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multiclusterhub-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784638644\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784740143\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1781686458\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1783352589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1781686446\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1783962464\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-27/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"],\"versions\":[{\"version\":\"1783917963\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194574\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/disk-image-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782804957\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-aws-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782758407\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-azure-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782758410\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-azure-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782754093\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782744816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-gcp-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782758409\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782744830\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-25-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.25.11-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.4-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"],\"versions\":[{\"version\":\"1786483782\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783953372\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.1::el9\"],\"versions\":[{\"version\":\"1785171639\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"],\"versions\":[{\"version\":\"1784211378\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1784061472\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1784152046\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-kueue-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1783544461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1784004914\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-training-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1783946386\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-feast-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787051722\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-kube-auth-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787102977\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1786630755\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-gc-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1786630724\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-processor-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1786630124\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-llm-d-inference-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1786611780\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-llm-d-routing-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1786612055\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-maas-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787153683\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mlflow-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787088234\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787250508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787251550\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1786611759\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787251250\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1786612219\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787250617\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-spark-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787090180\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-trainer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787089049\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-training-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.4::el9\"],\"versions\":[{\"version\":\"1787361677\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057515\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057868\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1784121108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783612119\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786705347\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706101\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786705558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786705646\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706138\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786705741\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786705777\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786705802\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786705938\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706577\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706125\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706177\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706188\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706679\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706357\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706612\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706644\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706659\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1786706880\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782931768\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/devicefinder-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932104\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783536000\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783535989\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783536515\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932521\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783018461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783018421\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-blackbox-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537001\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932919\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932969\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933015\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933042\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-drbd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537392\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933235\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933251\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537955\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933417\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537742\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933602\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783019377\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-volsync-plugin-mover-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934054\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-volsync-plugin-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782991491\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-gateway-opa-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1784775772\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1784775770\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-jaeger-query-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1784775834\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1784777166\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-query-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1784775793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1784775768\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1784775782\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.19::el8\"],\"versions\":[{\"version\":\"1782292352\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.20::el9\"],\"versions\":[{\"version\":\"1782383826\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1782287580\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201833\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201537\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782201466\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/node-healthcheck-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0.12::el9\"],\"versions\":[{\"version\":\"1785202723\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/self-node-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_snr:0.13::el9\"],\"versions\":[{\"version\":\"1785203036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/storage-based-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_sbr:0.3::el9\"],\"versions\":[{\"version\":\"1785203474\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0.7::el9\"],\"versions\":[{\"version\":\"1785203508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0.8::el9\"],\"versions\":[{\"version\":\"1785203079\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 5.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/node-maintenance-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nmo:5.7::el9\"],\"versions\":[{\"version\":\"1785202847\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1783750447\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1783751865\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784353904\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1784351966\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1783955846\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.17::el9\"],\"versions\":[{\"version\":\"1786181981\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1784125838\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"1785923308\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"1785929994\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"],\"versions\":[{\"version\":\"1784296203\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"],\"versions\":[{\"version\":\"1784247610\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"],\"versions\":[{\"version\":\"1784296127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"],\"versions\":[{\"version\":\"1784296114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"],\"versions\":[{\"version\":\"1784296033\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.16::el9\"],\"versions\":[{\"version\":\"1784295767\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Compliance Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dvo/deployment-validation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel9\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/far-operator-0-8\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\",\"cpe:/a:redhat:lvms:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/mdr-operator-0-7\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multiarch Tuning Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multiarch-tuning/multiarch-tuning-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multiarch_tuning_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-installer-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-installer-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-api-provider-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-api-provider-kubevirt-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/image-based-install-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/registration-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-user-workloads/nhc-operator-0-12\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/logic-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/kepler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel7-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-permission-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-cluster-permission-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-framework-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-search-indexer-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-search-v2-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-search-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-volsync-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/cert-policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/config-policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/governance-policy-propagator-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/insights-client-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/insights-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/klusterlet-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/memcached-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/search-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/subctl-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/submariner-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-5-dashboard-rhel8\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-6-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/alloy-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-certification-preflight\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/authorino-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10-eus/rhel-10.0-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9-eus/rhel-9.6-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-fips1.25\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ai-gateway-payload-processing-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-codeflare-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kf-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-llmisvc-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kuberay-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llama-stack-k8s-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-api-server-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-launcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mm-rest-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-runtime-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-serving-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-serving-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhaii-cluster-validator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trustyai-service-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workload-variant-autoscaler-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"atomic-openshift-service-idler\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon-rs\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-tools\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-prometheus-promu\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cli\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-kuryr\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-crio-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-osbs/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-libpod-stats\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openstack-k8s-operators-os-diff\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/ovn-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-security-profiles-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N\",\"baseScore\":9.6,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.1,\"impactScore\":5.8},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":5.8}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-23T03:55:58.522682Z\",\"id\":\"CVE-2026-39821\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1289\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1289\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:net:*:*:*:*:*:go:*:*\",\"versionEndExcluding\":\"0.55.0\",\"matchCriteriaId\":\"38C86E7B-A1CA-4670-B113-FC9585261F6F\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/767220\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://go.dev/issue/78760\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/94pEornpRlI\",\"source\":\"security@golang.org\"},{\"url\":\"https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-5026\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23264\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26546\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26547\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30650\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30853\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30854\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30855\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33155\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33160\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33163\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33173\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33183\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33524\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33531\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34342\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34357\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34359\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34364\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34789\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35826\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35827\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35828\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35829\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35830\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35831\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35993\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35994\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36105\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36167\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36207\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36648\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36808\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36820\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36883\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37387\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37435\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37436\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38995\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39005\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39573\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39879\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41019\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41031\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41036\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41055\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41066\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41930\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42048\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42050\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42078\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42079\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42080\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42082\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42132\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42146\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42240\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42644\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42852\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43038\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43052\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43692\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44622\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44624\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46395\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47149\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47737\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47952\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49702\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50300\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50843\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51112\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51187\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51341\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:52826\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53374\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53412\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53413\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53415\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53530\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54191\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54274\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54283\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54284\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54285\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54286\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54395\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54401\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54435\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54531\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54580\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54757\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56143\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56223\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56340\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56431\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57541\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57649\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57845\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59546\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59549\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59562\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60315\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60354\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60387\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60520\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-39821\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2480756\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-27T15:08:52+00:00",
"cve": "CVE-2026-39821",
"id": "CVE-2026-39821",
"initial_release_date": "2026-05-22T15:01:21.462000+00:00",
"product_status:fixed": "1445",
"product_status:known_affected": "178",
"product_status:known_not_affected": "3666",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.2, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.1-5.el10_2.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.3.0-7.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:10.2.6-27.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.3.8-6.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.9.2-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.1-2.el10_2.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-fdo-server\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.7-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.3.2-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.3.0-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.21.0-2.el10_0.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11-1.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-script\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.4.1-11.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:9.2.10-31.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.1.1-16.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260710105056.a3795dee\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-toolset:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.5-9.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.1-4.el9_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"git-lfs\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:10.2.6-23.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.1.1-17.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.7-8.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.17.0-2.el9_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:101.3-4.el9_4.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:10.2.6-22.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.21.0-7.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.7-1.el9_6.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.1.1-15.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:132.2-10.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.23-22.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"etcd\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el8sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el10em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Streams for Apache Kafka 3.2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"danielqsj-kafka_exporter\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cert Manager support for Red Hat OpenShift release 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786613805\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782840519\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839981\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839193\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782838753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839279\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782840539\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782844225\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839658\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782838476\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace:0.42::el9\"], \"vendor\": \"Red Hat\", \"product\": \"DevWorkspace Operator 0.42\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782401674\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785418851\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784747813\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782408807\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786645107\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786912006\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783332008\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783333268\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783985999\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782477094\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/kube-rbac-proxy-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782308518\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784737366\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784306906\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783260894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.5.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127491\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.7.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784768332\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1785775948\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785180878\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784058822\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782383730\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/acm-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782156698\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/acm-multicluster-observability-addon-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157632\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/acm-prometheus-config-reloader-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157829\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/acm-prometheus-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/cluster-backup-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782382580\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/endpoint-monitoring-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782383255\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/grafana-dashboard-loader-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782488873\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/kube-rbac-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157507\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/kube-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782396604\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/metrics-collector-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782382711\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-observability-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157546\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/node-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157471\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/observatorium-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157018\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/observatorium-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782156920\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/prometheus-alertmanager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782374537\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/prometheus-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782383676\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/rbac-query-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782156860\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/thanos-receive-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782465412\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/thanos-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784652040\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784638644\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multiclusterhub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784740143\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686458\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783352589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686446\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783962464\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783917963\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-27/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782804957\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/disk-image-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782758407\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-aws-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782758410\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-azure-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782754093\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-azure-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782744816\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782758409\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-gcp-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782744830\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.25.11-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-25-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.4-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786483782\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783953372\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-controller-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785171639\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784211378\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784061472\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784152046\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783544461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-kueue-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784004914\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783946386\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-training-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057515\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057868\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784121108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783612119\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786705347\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706101\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786705558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786705646\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706138\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786705741\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786705777\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786705802\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786705938\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706577\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706125\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706177\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706188\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706679\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706357\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706612\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706644\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706659\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786706880\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782931768\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932104\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/devicefinder-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783536000\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783535989\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783536515\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932521\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783018461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783018421\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-blackbox-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537001\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932919\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932969\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933015\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933042\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537392\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-drbd-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933235\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933251\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537955\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933417\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537742\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933602\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783019377\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934054\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-volsync-plugin-mover-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-volsync-plugin-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782991491\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784775772\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-gateway-opa-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784775770\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784775834\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-jaeger-query-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784777166\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784775793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-query-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784775768\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784775782\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782292352\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782383826\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782287580\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201833\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201537\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201466\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785202723\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/node-healthcheck-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_snr:0.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/self-node-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_sbr:0.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203474\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/storage-based-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203508\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/machine-deletion-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203079\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/fence-agents-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nmo:5.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 5.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785202847\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/node-maintenance-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783750447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783751865\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784353904\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784351966\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783955846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786181981\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784125838\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785923308\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785929994\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296203\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784247610\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296033\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784295767\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Compliance Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"packageName\": \"dvo/deployment-validation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"packageName\": \"redhat-user-workloads/far-operator-0-8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\", \"cpe:/a:redhat:lvms:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"packageName\": \"redhat-user-workloads/mdr-operator-0-7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multiarch_tuning_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Multiarch Tuning Operator\", \"packageName\": \"multiarch-tuning/multiarch-tuning-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-installer-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-installer-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/cluster-api-provider-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/cluster-api-provider-kubevirt-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/cluster-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/image-based-install-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/registration-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"redhat-user-workloads/nhc-operator-0-12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection\", \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection\", \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/logic-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/kepler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel7-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"multicluster-engine/cluster-permission-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-cluster-permission-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-framework-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-search-indexer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-search-v2-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-search-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-volsync-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/cert-policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/config-policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/governance-policy-propagator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/insights-client-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/insights-metrics-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/klusterlet-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/memcached-exporter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/search-collector-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/subctl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/submariner-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 5\", \"packageName\": \"rhceph/rhceph-5-dashboard-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/rhceph-6-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 8\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/alloy-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:certifications:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Certification Program for Red Hat Enterprise Linux 9\", \"packageName\": \"redhat-certification-preflight\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/authorino-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub\", \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10-eus/rhel-10.0-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9-eus/rhel-9.6-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"golang-fips1.25\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ai-gateway-payload-processing-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-codeflare-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-feast-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kf-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-llmisvc-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kube-auth-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kuberay-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llama-stack-k8s-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-gc-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-processor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-inference-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-routing-sidecar-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-api-server-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-launcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mm-rest-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-runtime-adapter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-serving-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-serving-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhaii-cluster-validator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-spark-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trainer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trustyai-service-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workload-variant-autoscaler-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"atomic-openshift-service-idler\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon-rs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-o\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-tools\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"golang-github-prometheus-promu\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-kuryr\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-crio-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"rh-osbs/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"collectd-libpod-stats\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"golang-github-openstack-k8s-operators-os-diff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/ovn-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-security-profiles-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-22T16:00:52.844Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-22T15:01:21.462Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54757: Red Hat OpenStack Platform 16.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54580: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34789: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56143: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59546: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30855: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37436: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35827: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35826: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30853: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35830: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35831: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59549: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59562: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56223: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:52826: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57541: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30854: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37435: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35828: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35829: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34342: Cluster Observability Operator 1.5.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36808: DevWorkspace Operator 0.42\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50843: Logging for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47952: Logging for Red Hat OpenShift 6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42852: Multicluster Global Hub 1.5.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47149: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53530: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51033: OpenShift API for Data Protection 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43692: OpenShift API for Data Protection 1.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26546: Red Hat Advanced Cluster Security for Kubernetes 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33531: Red Hat Enterprise Linux AI 3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33524: Red Hat Enterprise Linux AI 3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23262: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23264: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42644: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35994: Red Hat OpenShift GitOps 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35993: Red Hat OpenShift GitOps 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44624: Red Hat OpenShift distributed tracing 3.10.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42146: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43052: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42796: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41066: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54395: Red Hat Quay 3.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41031: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40262: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51341: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51194: Red Hat Satellite 6.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42043: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42047: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42050: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42051: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42049: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42048: Red Hat Web Terminal 1.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41030: Red Hat multicluster global hub 1.4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44622: Red Hat multicluster global hub 1.6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54435: Streams for Apache Kafka 3.2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57194: multicluster engine for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36105: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36167: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41055: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47735: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30650: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36883: multicluster engine for Kubernetes 2.9\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-22T15:01:21.462Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-39821\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2480756\", \"name\": \"RHBZ#2480756\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42079\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42080\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41019\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54191\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42078\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54757\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54580\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34789\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42082\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57845\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42240\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49702\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56143\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59546\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53413\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53374\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51187\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30855\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46395\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37436\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35827\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35826\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34357\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39005\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39573\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38995\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30853\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35830\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35831\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41930\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57649\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59549\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53412\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59562\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51112\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56223\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:52826\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53415\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57541\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54401\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30854\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37435\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35828\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35829\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34359\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39879\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54531\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34342\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36808\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34364\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56340\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50843\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47952\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42852\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47149\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53530\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43692\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47737\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26547\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36207\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26546\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42132\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33531\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33524\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23264\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54441\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50300\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43038\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42644\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36648\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41036\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36820\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35994\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35993\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33155\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33160\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33163\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33173\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33183\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54287\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54284\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54286\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54285\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54274\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54283\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44624\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56431\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37387\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42146\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43052\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41066\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54395\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41031\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51341\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42050\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42051\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42048\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44622\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54435\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36105\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36167\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41055\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47735\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30650\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36883\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1289\", \"description\": \"Improper Validation of Unsafe Equivalence in Input\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-26T12:04:56.253Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 9.6, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-39821\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-23T03:55:58.522682Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1289\", \"description\": \"CWE-1289 Improper Validation of Unsafe Equivalence in Input\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-22T18:01:10.401Z\"}}], \"cna\": {\"title\": \"Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna\", \"credits\": [{\"lang\": \"en\", \"value\": \"KC1zs4 (https://github.com/KC1zs4)\"}, {\"lang\": \"en\", \"value\": \"Longwei Wang (https://github.com/gn00295120)\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"net/http\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.13\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.6\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.27.0-0\", \"lessThan\": \"1.27.0-rc.3\", \"versionType\": \"semver\"}], \"packageName\": \"net/http\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"idnaASCII\"}, {\"name\": \"Client.CloseIdleConnections\"}, {\"name\": \"Client.Do\"}, {\"name\": \"Client.Get\"}, {\"name\": \"Client.Head\"}, {\"name\": \"Client.Post\"}, {\"name\": \"Client.PostForm\"}, {\"name\": \"ClientConn.Close\"}, {\"name\": \"ClientConn.RoundTrip\"}, {\"name\": \"Get\"}, {\"name\": \"Head\"}, {\"name\": \"Post\"}, {\"name\": \"PostForm\"}, {\"name\": \"Transport.CloseIdleConnections\"}, {\"name\": \"Transport.NewClientConn\"}, {\"name\": \"Transport.RoundTrip\"}, {\"name\": \"http1ClientConn.Close\"}, {\"name\": \"http1ClientConn.RoundTrip\"}, {\"name\": \"http2ClientConn.RoundTrip\"}, {\"name\": \"http2RoundTripper.RoundTrip\"}]}, {\"vendor\": \"Go standard library\", \"product\": \"net/http/internal/http2\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.13\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.6\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.27.0-0\", \"lessThan\": \"1.27.0-rc.3\", \"versionType\": \"semver\"}], \"packageName\": \"net/http/internal/http2\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"authorityAddr\"}, {\"name\": \"Transport.AddConn\"}, {\"name\": \"Transport.RoundTrip\"}, {\"name\": \"Transport.RoundTripOpt\"}]}, {\"vendor\": \"golang.org/x/net\", \"product\": \"golang.org/x/net/idna\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.55.0\", \"versionType\": \"semver\"}], \"packageName\": \"golang.org/x/net/idna\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"Profile.process\"}, {\"name\": \"Profile.ToASCII\"}, {\"name\": \"Profile.ToUnicode\"}, {\"name\": \"ToASCII\"}, {\"name\": \"ToUnicode\"}]}], \"references\": [{\"url\": \"https://go.dev/cl/767220\"}, {\"url\": \"https://go.dev/issue/78760\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/94pEornpRlI\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-5026\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\\\"xn--example-.com\\\") incorrectly returns the name \\\"example.com\\\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \\\"example.com\\\" but permit \\\"xn--example-.com\\\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \\\"example.com\\\".\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-1289: Improper Validation of Unsafe Equivalence in Input\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-08-21T21:01:48.612Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-39821\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-26T12:04:56.253Z\", \"dateReserved\": \"2026-04-07T18:13:03.526Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-05-22T15:01:21.462Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:54286
Vulnerability from csaf_redhat - Published: 2026-08-12 10:20 - Updated: 2026-08-29 02:43Summary
Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.3.1 security update
Severity
Important
Notes
Topic: This is an updated version of the Storage-Based Remediation Operator.
This Operator is delivered by Red Hat Workload Availability (RHWA).
Details: The Storage-Based Remediation Operator is an OLM Operator for managing STONITH Block Device (SBD) configurations and remediations for high-availability clustering.
The operator provides automated node remediation when nodes become unresponsive by leveraging shared block storage for fencing operations.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go. On BSD and Solaris platforms, a local attacker could exploit a vulnerability related to the `kenv` command. By manipulating the system's PATH environment variable, an attacker could achieve arbitrary code execution or privilege escalation, leading to a compromise of system integrity and confidentiality.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
References
75 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "This is an updated version of the Storage-Based Remediation Operator.\nThis Operator is delivered by Red Hat Workload Availability (RHWA).",
"title": "Topic"
},
{
"category": "general",
"text": "The Storage-Based Remediation Operator is an OLM Operator for managing STONITH Block Device (SBD) configurations and remediations for high-availability clustering.\nThe operator provides automated node remediation when nodes become unresponsive by leveraging shared block storage for fencing operations.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54286",
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39883",
"url": "https://access.redhat.com/security/cve/CVE-2026-39883"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54286.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.3.1 security update",
"tracking": {
"current_release_date": "2026-08-29T02:43:48+00:00",
"generator": {
"date": "2026-08-29T02:43:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54286",
"initial_release_date": "2026-08-12T10:20:50+00:00",
"revision_history": [
{
"date": "2026-08-12T10:20:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T02:43:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Workload Availability 0.3",
"product": {
"name": "Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:workload_availability_sbr:0.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Workload Availability"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-agent-rhel9@sha256%3Acf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9\u0026tag=1785203394"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-operator-bundle@sha256%3A264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle\u0026tag=1785204415"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-rhel9-operator@sha256%3A50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator\u0026tag=1785203474"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-agent-rhel9@sha256%3A615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9\u0026tag=1785203394"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-rhel9-operator@sha256%3A6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator\u0026tag=1785203474"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-agent-rhel9@sha256%3Aa135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9\u0026tag=1785203394"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-rhel9-operator@sha256%3A3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator\u0026tag=1785203474"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-agent-rhel9@sha256%3Addccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9\u0026tag=1785203394"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-rhel9-operator@sha256%3A7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator\u0026tag=1785203474"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39883",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"discovery_date": "2026-04-08T21:01:31.690577+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456718"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. On BSD and Solaris platforms, a local attacker could exploit a vulnerability related to the `kenv` command. By manipulating the system\u0027s PATH environment variable, an attacker could achieve arbitrary code execution or privilege escalation, leading to a compromise of system integrity and confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in OpenTelemetry-Go that allows a local attacker to achieve arbitrary code execution or privilege escalation through PATH hijacking. This vulnerability is specific to BSD and Solaris platforms due to the use of the `kenv` command and does not directly affect Red Hat Enterprise Linux environments. However, the vulnerable component is included in Red Hat products such as Multicluster Engine for Kubernetes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39883"
},
{
"category": "external",
"summary": "RHBZ#2456718",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456718"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39883"
},
{
"category": "external",
"summary": "http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0",
"url": "http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx"
}
],
"release_date": "2026-04-08T20:26:41.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
}
]
}
RHSA-2026:54287
Vulnerability from csaf_redhat - Published: 2026-08-12 10:22 - Updated: 2026-08-29 02:43Summary
Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.12.1 security update
Severity
Important
Notes
Topic: This is an updated version of the Node Health Check Operator.
This Operator is delivered by Red Hat Workload Availability (RHWA).
Details: The Node Health Check Operator deploys the Node Health Check controller.
The controller identifies unhealthy nodes and uses a remediation provider
to remediate the unhealthy nodes. You can install either the
Self Node Remediation Operator, the Fence Agents Remediation Operator,
or the Machine Deletion Remedation Operator as a remediation provider.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
References
62 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "This is an updated version of the Node Health Check Operator.\nThis Operator is delivered by Red Hat Workload Availability (RHWA).",
"title": "Topic"
},
{
"category": "general",
"text": "The Node Health Check Operator deploys the Node Health Check controller.\nThe controller identifies unhealthy nodes and uses a remediation provider\nto remediate the unhealthy nodes. You can install either the\nSelf Node Remediation Operator, the Fence Agents Remediation Operator,\nor the Machine Deletion Remedation Operator as a remediation provider.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54287",
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54287.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.12.1 security update",
"tracking": {
"current_release_date": "2026-08-29T02:43:49+00:00",
"generator": {
"date": "2026-08-29T02:43:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54287",
"initial_release_date": "2026-08-12T10:22:06+00:00",
"revision_history": [
{
"date": "2026-08-12T10:22:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T02:43:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Workload Availability 0.12",
"product": {
"name": "Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:workload_availability_nhc:0.12::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Workload Availability"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-operator-bundle@sha256%3A4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-operator-bundle\u0026tag=1785203783"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64",
"product_id": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-remediation-console-rhel9@sha256%3Adbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/node-remediation-console-rhel9\u0026tag=1785117460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-must-gather-rhel9@sha256%3A07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9\u0026tag=1784971679"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-rhel9-operator@sha256%3A6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator\u0026tag=1785202723"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"product_id": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"product_identification_helper": {
"purl": "pkg:oci/node-remediation-console-rhel9@sha256%3A0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/node-remediation-console-rhel9\u0026tag=1785117460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-must-gather-rhel9@sha256%3Ab5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9\u0026tag=1784971679"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-rhel9-operator@sha256%3Ad548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator\u0026tag=1785202723"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"product_id": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/node-remediation-console-rhel9@sha256%3A2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/node-remediation-console-rhel9\u0026tag=1785117460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-must-gather-rhel9@sha256%3Ab906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9\u0026tag=1784971679"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-rhel9-operator@sha256%3A82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator\u0026tag=1785202723"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"product_id": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/node-remediation-console-rhel9@sha256%3A5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/node-remediation-console-rhel9\u0026tag=1785117460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-must-gather-rhel9@sha256%3Aee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9\u0026tag=1784971679"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-rhel9-operator@sha256%3Aae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator\u0026tag=1785202723"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
}
]
}
RHSA-2026:54395
Vulnerability from csaf_redhat - Published: 2026-08-12 14:37 - Updated: 2026-08-27 15:28Summary
Red Hat Security Advisory: Red Hat Quay 3.17.4
Severity
Important
Notes
Topic: Red Hat Quay 3.17.4 is now available with bug fixes.
Details: Quay 3.17.4
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x | — |
Vendor Fix
fix
|
Known not affected
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le | — |
Threats
Impact
Important
A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validate_external_registry_url(). A repository administrator can supply a crafted hostname that causes the Quay mirror worker to make requests via Skopeo to internal network services, cloud metadata endpoints, or other resources not intended to be reachable from the Quay application.
6.8 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
24 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.17.4 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.17.4",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54395",
"url": "https://access.redhat.com/errata/RHSA-2026:54395"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15927",
"url": "https://access.redhat.com/security/cve/CVE-2026-15927"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54395.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.17.4",
"tracking": {
"current_release_date": "2026-08-27T15:28:22+00:00",
"generator": {
"date": "2026-08-27T15:28:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54395",
"initial_release_date": "2026-08-12T14:37:18+00:00",
"revision_history": [
{
"date": "2026-08-12T14:37:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-27T15:28:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.17",
"product": {
"name": "Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.17::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1786182401"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Ada241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1786181642"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Af2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1786182526"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1786181654"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Abc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1786182086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1786181688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Ac3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1786181669"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Ae669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1786429805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1786181701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1786181981"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1786181642"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1786181654"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1786182086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1786181688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1786181669"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1786181701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Aca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1786181981"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Af99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1786181642"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1786181654"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ab6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1786182086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3Abb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1786181688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Ad3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1786181669"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Aa827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1786181701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1786181981"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1786181642"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Ac9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1786181654"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1786182086"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1786181688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1786181669"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1786181701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Af707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1786181981"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64 as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"relates_to_product_reference": "Red Hat Quay 3.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x as a component of Red Hat Quay 3.17",
"product_id": "Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x",
"relates_to_product_reference": "Red Hat Quay 3.17"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T14:37:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54395"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"acknowledgments": [
{
"names": [
"Shaon Hossain"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Martin Brodeur"
]
}
],
"cve": "CVE-2026-15927",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-13T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2501256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s repository-level mirror configuration\nfeature. The POST and PUT handlers in endpoints/api/mirror.py accept an\nexternal_reference parameter without SSRF validation, unlike the\norganization-level mirror handlers which apply validate_external_registry_url().\nA repository administrator can supply a crafted hostname that causes the Quay\nmirror worker to make requests via Skopeo to internal network services, cloud\nmetadata endpoints, or other resources not intended to be reachable from the\nQuay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "quay: mirror-registry: SSRF: repo-level mirror accepts external_reference without URL validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Red Hat Quay\u0027s repository-level mirror configuration allows an authenticated repository administrator to conduct Server-Side Request Forgery (SSRF). By providing a specially crafted hostname, an attacker can force the Quay mirror worker to connect to internal network services or cloud metadata endpoints, potentially exposing sensitive internal resources. This risk is limited to actions performed by an authenticated administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15927"
},
{
"category": "external",
"summary": "RHBZ#2501256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15927",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15927"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15927",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15927"
}
],
"release_date": "2026-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T14:37:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54395"
},
{
"category": "workaround",
"details": "Restrict network egress from Quay mirror worker pods/containers using network\npolicies or firewall rules to block access to internal network ranges\n(10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and cloud metadata endpoints\n(169.254.169.254, metadata.google.internal). Limit repository creation and\nadmin privileges to trusted users via Quay\u0027s RBAC configuration. If\nrepository-level mirroring is not required, disable the feature or restrict\naccess to the mirror API endpoints through a reverse proxy.",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "quay: mirror-registry: SSRF: repo-level mirror accepts external_reference without URL validation"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
],
"known_not_affected": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T14:37:18+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54395"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:49a2e8856100fa93a933746580ed5a9cb1418fac17d0557a3a0ee0be98576261_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:96d1f104d0e0b5b2ac79029baf3d41e8490cc0f7b96792049a443ea27f5dfc15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:c3c71d300d5d2ae451be96180405aec9a5afd1ef2b48099a1eb53a46b2548618_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/clair-rhel9@sha256:d3601d847460c5023736da87f9d1aec44ff7a5b311f731a1818573a5ab82e966_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2de392852cbbd74d59a07a2bdd91030c563b65f694cb23845da4a8ae198c0c4_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:17f37ac6f59685f0d332c970ee33d025cbe834f0f2ed684feee1d6084b7ef5fd_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:345fce838fb057d96437df0c30bbbb90d4dec0d19fcd4ced8b11997adcbb0a89_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:672e6fbf2da879bdfd80798e36b69466329cf8de70f61be88b0f4ec0ebaf2eb6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c9871813ad1fa8410cd1954e7c16a6e939edca036be40df4b2117d1595bb6236_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5444661ed0a7f4d6cf943bb7465bd7c75918e1c2fc159fe341b1b7044ac320b6_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:723c7f83145d5b5c9a30154ee9bfd70f55144d643c15e17f1f5a1db16c317d98_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b6ba88e17383136cab3653b5bd2f7aeaea55f3a67d49e15f3610cdcbda751984_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bc1a330c680516b4ab6831ce434f5d4158897fa3d632a287872f0fb47e4e5372_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:2b491bdad3973b56ec2c8198003788f8d46d1b2e882885155922bd750814b7e9_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:74edfcc5c7906b3cf16ab02b04eadc8633c7ae1870209a05aa7c6d8836dc3f15_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:857003bf4a8d7de0fa1ac6e1b93b8264161daacb2f7101f6edcc99d8c0eb730c_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-builder-rhel9@sha256:bb4045f0222d4313f6a66b68bc69eb7ec000a4f820c2ca39bb84fde5d0ef45f9_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:2c80074a85868ebbc3070868904dd35fd0c6e383f790915078f34c0a877987b5_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:19af2dbe8723373c8c231113aeab3fe46011c309cac2c6a938956274155e0923_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:730f609c5e53134320ca35b1dac4a87a2d042df313353df1640752576088769b_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:da241413377b6786f210017bdb38e83aa6d7323aae3e896cc9db1f06cc6eb62f_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:f99cdde780614d394510e9e8f9a74321defe5615ce2201c1d6c1ff60567927ac_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-bundle@sha256:e669e36a1e791d1b2751552b4c1cbffee0d95d3e2ccf2cffbd7c653b219795cc_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:32b9fd5174dbb720b470897f9caa708bac8a50a092f517e460f15e2ad8752882_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:50565a29d0257697b3680a2b154c639acd75b1444cedda943628eb009123559e_s390x",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:714e5d16549a8290157ed18b97441f960c72ba144d75a705e4b92f458e01a12a_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-operator-rhel9@sha256:a827ed743197c3726f8113156e721edf290574ee982d9349da1a7fa2aa93592c_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:0fdb2561f63f680abdb2cdb52509ebda25cc8ecdb4ef09599c75bdaa4480a46a_ppc64le",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:2f193ba7ede425c34d95c31a3c0c28e7ca6e1d9b07a09f8d4af5218dadae369d_amd64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:ca340ee931147544b3f3023107234401c1e699b3b6417fd4464506b32896c12e_arm64",
"Red Hat Quay 3.17:registry.redhat.io/quay/quay-rhel9@sha256:f707869db8f761ea0bb1d9fe444dd193f8ed34bc68c733a64ab5705cfa85cdb3_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
RHSA-2026:54401
Vulnerability from csaf_redhat - Published: 2026-08-12 16:02 - Updated: 2026-08-27 15:28Summary
Red Hat Security Advisory: rhc security update
Severity
Important
Notes
Topic: An update for rhc is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.
Security Fix(es):
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rhc is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.\n\nSecurity Fix(es):\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54401",
"url": "https://access.redhat.com/errata/RHSA-2026:54401"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54401.json"
}
],
"title": "Red Hat Security Advisory: rhc security update",
"tracking": {
"current_release_date": "2026-08-27T15:28:22+00:00",
"generator": {
"date": "2026-08-27T15:28:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54401",
"initial_release_date": "2026-08-12T16:02:34+00:00",
"revision_history": [
{
"date": "2026-08-12T16:02:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-12T16:02:34+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-27T15:28:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product": {
"name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.7-1.el9_6.5.src",
"product": {
"name": "rhc-1:0.2.7-1.el9_6.5.src",
"product_id": "rhc-1:0.2.7-1.el9_6.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.7-1.el9_6.5?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.7-1.el9_6.5.aarch64",
"product": {
"name": "rhc-1:0.2.7-1.el9_6.5.aarch64",
"product_id": "rhc-1:0.2.7-1.el9_6.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.7-1.el9_6.5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"product": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"product_id": "rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.7-1.el9_6.5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"product": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"product_id": "rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.7-1.el9_6.5?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"product": {
"name": "rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"product_id": "rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-devel@0.2.7-1.el9_6.5?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.7-1.el9_6.5.ppc64le",
"product": {
"name": "rhc-1:0.2.7-1.el9_6.5.ppc64le",
"product_id": "rhc-1:0.2.7-1.el9_6.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.7-1.el9_6.5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"product": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"product_id": "rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.7-1.el9_6.5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"product": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"product_id": "rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.7-1.el9_6.5?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"product": {
"name": "rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"product_id": "rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-devel@0.2.7-1.el9_6.5?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.7-1.el9_6.5.s390x",
"product": {
"name": "rhc-1:0.2.7-1.el9_6.5.s390x",
"product_id": "rhc-1:0.2.7-1.el9_6.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.7-1.el9_6.5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"product": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"product_id": "rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.7-1.el9_6.5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"product": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"product_id": "rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.7-1.el9_6.5?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"product": {
"name": "rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"product_id": "rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-devel@0.2.7-1.el9_6.5?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhc-1:0.2.7-1.el9_6.5.x86_64",
"product": {
"name": "rhc-1:0.2.7-1.el9_6.5.x86_64",
"product_id": "rhc-1:0.2.7-1.el9_6.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc@0.2.7-1.el9_6.5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"product": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"product_id": "rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debugsource@0.2.7-1.el9_6.5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"product": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"product_id": "rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-debuginfo@0.2.7-1.el9_6.5?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rhc-devel-1:0.2.7-1.el9_6.5.x86_64",
"product": {
"name": "rhc-devel-1:0.2.7-1.el9_6.5.x86_64",
"product_id": "rhc-devel-1:0.2.7-1.el9_6.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhc-devel@0.2.7-1.el9_6.5?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.7-1.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64"
},
"product_reference": "rhc-1:0.2.7-1.el9_6.5.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.7-1.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le"
},
"product_reference": "rhc-1:0.2.7-1.el9_6.5.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.7-1.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x"
},
"product_reference": "rhc-1:0.2.7-1.el9_6.5.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.7-1.el9_6.5.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src"
},
"product_reference": "rhc-1:0.2.7-1.el9_6.5.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-1:0.2.7-1.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64"
},
"product_reference": "rhc-1:0.2.7-1.el9_6.5.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64"
},
"product_reference": "rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le"
},
"product_reference": "rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x"
},
"product_reference": "rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64"
},
"product_reference": "rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64"
},
"product_reference": "rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le"
},
"product_reference": "rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x"
},
"product_reference": "rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64"
},
"product_reference": "rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64"
},
"product_reference": "rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le"
},
"product_reference": "rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x"
},
"product_reference": "rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64"
},
"product_reference": "rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64"
},
"product_reference": "rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le"
},
"product_reference": "rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x"
},
"product_reference": "rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64"
},
"product_reference": "rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-devel-1:0.2.7-1.el9_6.5.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64"
},
"product_reference": "rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-devel-1:0.2.7-1.el9_6.5.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le"
},
"product_reference": "rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-devel-1:0.2.7-1.el9_6.5.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x"
},
"product_reference": "rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhc-devel-1:0.2.7-1.el9_6.5.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64"
},
"product_reference": "rhc-devel-1:0.2.7-1.el9_6.5.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T16:02:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54401"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T16:02:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54401"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.src",
"AppStream-9.6.0.Z.EUS:rhc-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"AppStream-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debuginfo-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-debugsource-1:0.2.7-1.el9_6.5.x86_64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.aarch64",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.ppc64le",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.s390x",
"CRB-9.6.0.Z.EUS:rhc-devel-1:0.2.7-1.el9_6.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
RHSA-2026:54435
Vulnerability from csaf_redhat - Published: 2026-08-12 19:35 - Updated: 2026-08-27 20:51Summary
Red Hat Security Advisory: Streams for Apache Kafka 3.2.1 release and security update
Severity
Important
Notes
Topic: Streams for Apache Kafka 3.2.1 is now available from the Red Hat Customer Portal.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat Streams for Apache Kafka, based on the Apache Kafka project, offers a distributed
backbone that allows microservices and other applications to share data with
extremely high throughput and extremely low latency.
This release of Red Hat Streams for Apache Kafka 3.2.1 serves as a replacement for Red Hat Streams for Apache Kafka 3.2.0, and includes security and bug fixes, and enhancements.
Security Fix(es):
* golang-github-danielqsj-kafka_exporter: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests (CVE-2026-39852)
* kafka-clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management (CVE-2026-35554)
* log4j-layout-template-json: Apache Log4j JsonTemplateLayout: Denial of Service via invalid JSON output (CVE-2026-34481)
* log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging (CVE-2026-34480)
* log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames (CVE-2026-34478)
* netty-codec-dns: Netty: High integrity impact due to improper DNS domain name constraint enforcement (CVE-2026-42579)
* netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion (CVE-2026-42584)
* netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers (CVE-2026-42581)
* netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation (CVE-2026-42578)
* netty-codec-http: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)
* netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)
* netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder (CVE-2026-42583)
* netty-codec-compression: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder (CVE-2026-42583)
* next: Next.js: Authorization bypass via crafted query parameters (CVE-2026-44574)
* next: Next.js: Denial of Service via crafted POST requests to server actions (CVE-2026-44579)
* next: Next.js: Denial of Service via Image Optimization API (CVE-2026-44577)
* next: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n (CVE-2026-44573)
* next: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests (CVE-2026-44578)
* next: Next.js: Information disclosure via security fix bypass in middleware with Turbopack (CVE-2026-45109)
* next: Next.js: Unauthorized access to protected content via middleware bypass (CVE-2026-44575)
* quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559)
* golang-github-danielqsj-kafka_exporter: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* vertx-core: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860)
* netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)
* netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)
* netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)
* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)
* netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)
* netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)
* netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)
* golang-github-danielqsj-kafka_exporter: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* cluster-operator: Cross-namespace privilege escalation via Kafka.spec.entityOperator.watchedNamespace in Strimzi (CVE-2026-55225)
* micrometer-core: Micrometer: Denial of Service via specially crafted HTTP requests (CVE-2026-40984)
* micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests (CVE-2026-40983)
* golang-github-danielqsj-kafka_exporter: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)
* jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing (CVE-2026-50193)
* golang-github-danielqsj-kafka_exporter: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)
* jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)
* vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects (CVE-2026-15075)
* vertx-core-logging: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects (CVE-2026-15075)
* smallrye-mutiny-vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects (CVE-2026-15075)
* js-yaml: js-yaml: Denial of Service via crafted YAML documents (CVE-2026-59869)
* resteasy-reactive-client-processor: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service (CVE-2026-16308)
* resteasy-reactive-common-processor: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service (CVE-2026-16308)
* vertx-web-common: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation (CVE-2026-15076)
* netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification (CVE-2026-55833)
* netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing (CVE-2026-55831)
* netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec (CVE-2026-56745)
* netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header (CVE-2026-56746)
* netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak (CVE-2026-56819)
* netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) (CVE-2026-59899)
* netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) (CVE-2026-59901)
* jetty-server: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections (CVE-2026-10051)
* postcss: PostCSS: Information disclosure via crafted sourceMappingURL (CVE-2026-69153)
* next: Next.js: Denial of Service via excessive memory consumption in Server Actions (CVE-2026-64646)
* next: Next.js: Information disclosure via server-side fetch cache (CVE-2026-64648)
* next: Next.js: Server-Side Request Forgery vulnerability (CVE-2026-64645)
* next: Next.js: Server-Side Request Forgery via malicious host redirection in Server Actions (CVE-2026-64649)
* next: Next.js: Denial of Service via malicious image optimization (CVE-2026-64644)
* next: Next.js: Denial of Service via crafted requests to App Router with Server Actions (CVE-2026-64641)
* netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability
* dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution (CVE-2026-49978)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in eclipse-vertx/vert.x. A remote attacker can exploit this vulnerability by performing a Transport Layer Security (TLS) handshake and presenting a server name extension with a server wildcard name. This can lead to a denial of service (DoS) condition, impacting the availability of the affected system.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Eclipse Vert.x. The `DefaultRedirectHandler` in `vertx-core` improperly handles HTTP 30x redirects by propagating all request headers, including sensitive authentication and session credentials, to cross-origin redirect destinations. An attacker can exploit this by redirecting a Vert.x HttpClient request to a malicious host. This allows the attacker to capture sensitive information such as bearer tokens, basic authentication credentials, session cookies, and API keys, leading to unauthorized access or further attacks.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Eclipse Vert.x Web Client. The WebClientSession component does not properly validate the Domain attribute of a Set-Cookie response header against the originating server's domain. This vulnerability allows a remote attacker to inject a cookie scoped to an arbitrary third-party domain. When the victim application subsequently sends a request to the targeted domain, the injected cookie is presented, potentially leading to information disclosure and unauthorized access to sensitive data through the attacker's account on that service.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine (JVM) heap memory, leading to an OutOfMemoryError. The primary consequence is a denial of service, causing the application to crash.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Log4j Core. This vulnerability allows for log injection through the use of Carriage Return Line Feed (CRLF) sequences. This occurs because security-related configuration attributes were silently renamed, impacting users who directly configure Rfc5424Layout with stream-based syslog services. An attacker could exploit this to inject malicious data into log files, potentially obscuring critical security events or manipulating system records.
5.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Apache Log4j Core. The XmlLayout component, responsible for formatting log messages into XML, does not properly remove or replace characters that are not allowed in XML 1.0. When log messages or diagnostic information contain these forbidden characters, the resulting XML output becomes invalid. This can lead to two main issues: either systems processing these logs will fail to read the affected records, or the logging process itself will stop delivering events, both resulting in a denial of service for logging operations.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Apache Log4j's JsonTemplateLayout. This vulnerability allows a remote attacker to disrupt log processing systems. By sending log events that include specific non-numeric floating-point values, the attacker can cause the JsonTemplateLayout to generate invalid JSON output. This invalid output can then lead to downstream systems rejecting or failing to index these logs, effectively causing a denial of service for log analysis.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Apache Kafka Java producer client. A race condition in the client's buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer deallocation and potential reuse by other messages. Consequently, sensitive data may be exposed to unauthorized consumers, and data integrity can be compromised through deserialization failures and processing errors.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in io.quarkus:quarkus-vertx-http. A remote attacker can exploit an authorization bypass vulnerability by including semicolons, also known as matrix parameters, in HTTP requests. This allows bypassing path-based HTTP security policies, enabling unauthorized access to protected endpoints. The vulnerability arises because Quarkus's security layer performs authorization checks on the raw URL path, which preserves these matrix parameters.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC (gRPC Remote Procedure Call) requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected behavior or potential bypass of security controls on the proxy server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty. Netty's DNS (Domain Name System) codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the encoder through user-influenced hostnames, leading to a high integrity impact on the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both `Transfer-Encoding: chunked` and `Content-Length` headers. While Netty correctly strips the conflicting `Content-Length` header for HTTP/1.1 messages, this guard is absent for HTTP/1.0. This can lead to HTTP request smuggling, where downstream proxies or handlers may misinterpret message boundaries, potentially allowing an attacker to bypass security controls or access unauthorized information.
7.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted LZ4 compressed data stream. This can cause the Lz4FrameDecoder to allocate a large amount of memory (up to 32 MB per block) before the LZ4 decompression runs, leading to excessive memory consumption and a denial of service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses (103, followed by a 200 with a GET body, then another 200 for a HEAD request) when the client pipelines GET then HEAD requests. This can cause the HttpClientCodec to incorrectly pair responses, leading to subsequent HTTP responses being parsed from the wrong offset. This issue may result in information disclosure or other data integrity problems due to misinterpretation of network traffic.
7.3 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. Applications utilizing the Pages Router with internationalization (i18n) configured and middleware or proxy-based authorization are susceptible to unauthorized access. A remote attacker can exploit this by making locale-less /_next/data/<buildId>/<page>.json requests, which bypass the intended authorization checks. This allows the attacker to retrieve sensitive server-side rendered (SSR) JSON data from protected pages, leading to information disclosure.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. This vulnerability allows an attacker to bypass security checks in web applications that use Next.js middleware to protect specific web pages. By sending specially crafted web addresses, an attacker can access protected content without proper authorization. This could lead to unauthorized viewing of sensitive information or access to restricted features.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. App Router applications that use middleware or proxy-based authorization checks are vulnerable to unauthorized access. A remote attacker can exploit this by crafting specific .rsc and segment-prefetch URLs, which bypass the intended middleware rules. This allows access to protected content without proper authorization.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. When self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. A remote attacker could exploit this by requesting large local assets from the /_next/image endpoint. This can lead to out-of-memory conditions, resulting in a Denial of Service (DoS) for the application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery (SSRF) through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or external destinations. This could lead to the exposure of internal services or sensitive cloud metadata endpoints.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open, consuming server resources and ultimately leading to a Denial of Service (DoS) for legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Next.js. A remote unauthenticated attacker could exploit a bypass in a security fix when using middleware.ts with Turbopack. This vulnerability could lead to the disclosure of sensitive information.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a `<template>.content`. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON (JavaScript Object Notation) data to a service that reads and processes it. This can lead to a Denial of Service (DoS) by consuming significant system resources, making the service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Quarkus. A remote attacker could bypass HTTP path-based authorization policies by using specially crafted encoded semicolons, slashes, or backslashes in HTTP requests. This could allow unauthorized access to protected static resources, leading to information disclosure.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
When the Strimzi cluster operator is deployed with watchAnyNamespace=true (or a multi-namespace list), any namespace editor can set Kafka.spec.entityOperator.userOperator.watchedNamespace (or topicOperator.watchedNamespace) to an arbitrary namespace. The cluster operator then creates a Role granting full CRUD on Secrets in the target namespace and a RoleBinding pointing to a ServiceAccount in the attacker's namespace — effectively granting cluster-admin-equivalent access via kube-system secret exfiltration. The RBAC objects created cross-namespace have their ownerReferences deliberately stripped, making the privilege grant persistent even after the Kafka CR or attacker namespace is deleted. Fixed in Strimzi 1.0.1 and 1.1.0 by adding a dedicated environment variable to explicitly enable the watched namespace feature (disabled by default).
8.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service (DoS) due to heap growth and increased CPU usage.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to excessive CPU usage and memory allocation. This can result in a denial of service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This oversight leads to native memory exhaustion, which can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the backend application. This could lead to a compromise of data integrity by allowing unauthorized actions.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing the application to crash and resulting in a Denial of Service (DoS). The issue occurs because the framework fails to release retained memory buffers when processing DATA frames for a stream whose decompressor has already been closed.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to memory exhaustion and a denial of service (DoS), making the service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the netty-codec-compression component of Netty. This vulnerability, caused by a logic error in the bzip2 decoder, allows a remote attacker to send specially crafted bzip2-compressed data. Processing this malformed data can trigger an infinite loop, causing the decoder thread to consume excessive CPU resources. This leads to a denial of service (DoS), requiring manual intervention to restore service.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Next.js, a React framework for building web applications. A remote attacker can send specially crafted requests to Next.js applications that utilize the App Router with Server Actions. This can lead to excessive CPU usage, causing the application to become unresponsive and preventing it from processing further requests, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Next.js, a React framework. When self-hosting Next.js with the default image loader and configured to optimize remotely hosted images, a remote attacker could exploit the Image Optimization API. By providing malicious images, the attacker can cause CPU exhaustion, leading to a Denial of Service (DoS) in the /_next/image endpoints. This vulnerability specifically affects configurations using config.images.remotePatterns.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Next.js, a React framework for building web applications. This vulnerability allows a remote attacker to perform Server-Side Request Forgery (SSRF) or Open Redirect attacks. When a `rewrites()` or `redirects()` rule constructs an external destination hostname using attacker-controlled input, the application can be coerced into proxying requests to arbitrary hosts, leading to SSRF. Additionally, this misconfiguration can result in Open Redirects, potentially exposing users to phishing.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Next.js. An attacker sending specially crafted requests to a Next.js application utilizing the App Router with Server Actions configured to use the Edge runtime can cause excessive memory consumption. This can lead to a denial of service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Next.js. A remote attacker could exploit a vulnerability in the server-side fetch mechanism, where a request with a body might receive a cached response intended for a different request to the same URL but different body. This could lead to the unauthorized disclosure of confidential data from POST request response bodies to an unprivileged user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Next.js, a framework for building web applications. A remote attacker can exploit this vulnerability by manipulating Host-associated headers when a Server Action forwards or redirects a request. This can lead to Server-Side Request Forgery (SSRF), where the server is tricked into making requests to an attacker-controlled host. Such an attack could potentially expose internal system information or bypass authorization controls.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the 'from' parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application's source code.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Streams for Apache Kafka 3.2.1
Red Hat / Red Hat OpenShift Enterprise
|
cpe:/a:redhat:amq_streams:3.2::el9
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
358 references
Acknowledgments
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Streams for Apache Kafka 3.2.1 is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Streams for Apache Kafka, based on the Apache Kafka project, offers a distributed\nbackbone that allows microservices and other applications to share data with\nextremely high throughput and extremely low latency.\n\nThis release of Red Hat Streams for Apache Kafka 3.2.1 serves as a replacement for Red Hat Streams for Apache Kafka 3.2.0, and includes security and bug fixes, and enhancements.\n\nSecurity Fix(es):\n * golang-github-danielqsj-kafka_exporter: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n * quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests (CVE-2026-39852)\n * kafka-clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management (CVE-2026-35554)\n * log4j-layout-template-json: Apache Log4j JsonTemplateLayout: Denial of Service via invalid JSON output (CVE-2026-34481)\n * log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging (CVE-2026-34480)\n * log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames (CVE-2026-34478)\n * netty-codec-dns: Netty: High integrity impact due to improper DNS domain name constraint enforcement (CVE-2026-42579)\n * netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion (CVE-2026-42584)\n * netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers (CVE-2026-42581)\n * netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation (CVE-2026-42578)\n * netty-codec-http: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)\n * netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)\n * netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder (CVE-2026-42583)\n * netty-codec-compression: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder (CVE-2026-42583)\n * next: Next.js: Authorization bypass via crafted query parameters (CVE-2026-44574)\n * next: Next.js: Denial of Service via crafted POST requests to server actions (CVE-2026-44579)\n * next: Next.js: Denial of Service via Image Optimization API (CVE-2026-44577)\n * next: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n (CVE-2026-44573)\n * next: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests (CVE-2026-44578)\n * next: Next.js: Information disclosure via security fix bypass in middleware with Turbopack (CVE-2026-45109)\n * next: Next.js: Unauthorized access to protected content via middleware bypass (CVE-2026-44575)\n * quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559)\n * golang-github-danielqsj-kafka_exporter: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n * vertx-core: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860)\n * netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)\n * netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)\n * netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)\n * netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)\n * netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)\n * netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)\n * netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)\n * golang-github-danielqsj-kafka_exporter: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n * cluster-operator: Cross-namespace privilege escalation via Kafka.spec.entityOperator.watchedNamespace in Strimzi (CVE-2026-55225)\n * micrometer-core: Micrometer: Denial of Service via specially crafted HTTP requests (CVE-2026-40984)\n * micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests (CVE-2026-40983)\n * golang-github-danielqsj-kafka_exporter: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n * jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)\n * jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing (CVE-2026-50193)\n * golang-github-danielqsj-kafka_exporter: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)\n * jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)\n * vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects (CVE-2026-15075)\n * vertx-core-logging: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects (CVE-2026-15075)\n * smallrye-mutiny-vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects (CVE-2026-15075)\n * js-yaml: js-yaml: Denial of Service via crafted YAML documents (CVE-2026-59869)\n * resteasy-reactive-client-processor: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service (CVE-2026-16308)\n * resteasy-reactive-common-processor: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service (CVE-2026-16308)\n * vertx-web-common: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation (CVE-2026-15076)\n * netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification (CVE-2026-55833)\n * netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing (CVE-2026-55831)\n * netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec (CVE-2026-56745)\n * netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header (CVE-2026-56746)\n * netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak (CVE-2026-56819)\n * netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) (CVE-2026-59899)\n * netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2) (CVE-2026-59901)\n * jetty-server: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections (CVE-2026-10051)\n * postcss: PostCSS: Information disclosure via crafted sourceMappingURL (CVE-2026-69153)\n * next: Next.js: Denial of Service via excessive memory consumption in Server Actions (CVE-2026-64646)\n * next: Next.js: Information disclosure via server-side fetch cache (CVE-2026-64648)\n * next: Next.js: Server-Side Request Forgery vulnerability (CVE-2026-64645)\n * next: Next.js: Server-Side Request Forgery via malicious host redirection in Server Actions (CVE-2026-64649)\n * next: Next.js: Denial of Service via malicious image optimization (CVE-2026-64644)\n * next: Next.js: Denial of Service via crafted requests to App Router with Server Actions (CVE-2026-64641)\n * netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability\n * dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution (CVE-2026-49978)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54435",
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54435.json"
}
],
"title": "Red Hat Security Advisory: Streams for Apache Kafka 3.2.1 release and security update",
"tracking": {
"current_release_date": "2026-08-27T20:51:16+00:00",
"generator": {
"date": "2026-08-27T20:51:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54435",
"initial_release_date": "2026-08-12T19:35:14+00:00",
"revision_history": [
{
"date": "2026-08-12T19:35:14+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-12T19:35:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-27T20:51:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Streams for Apache Kafka 3.2.1",
"product": {
"name": "Streams for Apache Kafka 3.2.1",
"product_id": "Streams for Apache Kafka 3.2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_streams:3.2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-06T10:01:43.929832+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466990"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in eclipse-vertx/vert.x. A remote attacker can exploit this vulnerability by performing a Transport Layer Security (TLS) handshake and presenting a server name extension with a server wildcard name. This can lead to a denial of service (DoS) condition, impacting the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Moderate because a remote attacker can trigger a denial of service in Red Hat products that use `eclipse-vertx/vert.x` and are configured with TLS wildcard server names. Exploitation occurs during the TLS handshake, impacting service availability without affecting data confidentiality or integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6860"
},
{
"category": "external",
"summary": "RHBZ#2466990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6860"
},
{
"category": "external",
"summary": "https://github.com/eclipse-vertx/vert.x/pull/6102",
"url": "https://github.com/eclipse-vertx/vert.x/pull/6102"
},
{
"category": "external",
"summary": "https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6",
"url": "https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381",
"url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381"
}
],
"release_date": "2026-05-06T09:55:12.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name"
},
{
"cve": "CVE-2026-10051",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-07-14T10:01:09.470495+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499928"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This information disclosure flaw in Eclipse Jetty allows HTTP/1.1 trailers from a previous request to be retained and subsequently exposed to other requests sharing the same connection. This could lead to unintended disclosure of sensitive information in Red Hat products utilizing Jetty, such as Red Hat AMQ and Enterprise Application Platform, particularly when connection reuse is active and trailers contain confidential data. The confidentiality impact is considered low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10051"
},
{
"category": "external",
"summary": "RHBZ#2499928",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499928"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10051"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119"
}
],
"release_date": "2026-07-14T08:44:38.233000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections"
},
{
"cve": "CVE-2026-15075",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-07-14T09:01:12.413297+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499919"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Vert.x. The `DefaultRedirectHandler` in `vertx-core` improperly handles HTTP 30x redirects by propagating all request headers, including sensitive authentication and session credentials, to cross-origin redirect destinations. An attacker can exploit this by redirecting a Vert.x HttpClient request to a malicious host. This allows the attacker to capture sensitive information such as bearer tokens, basic authentication credentials, session cookies, and API keys, leading to unauthorized access or further attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Eclipse Vert.x\u0027s `DefaultRedirectHandler` that affects Red Hat products utilizing `vertx-core` for HTTP client operations. The vulnerability allows sensitive request headers, such as authentication tokens and session cookies, to be forwarded to arbitrary external domains during HTTP 30x redirects. This could enable an attacker to capture credentials if they can induce a Vert.x HttpClient to redirect to a malicious server, potentially leading to unauthorized access.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15075"
},
{
"category": "external",
"summary": "RHBZ#2499919",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499919"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15075",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15075"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/161",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/161"
}
],
"release_date": "2026-07-14T08:15:53.650000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure applications utilizing Vert.x HttpClient to strictly validate and restrict the URLs to which HTTP requests can be redirected. Implement allowlists for trusted domains and ensure that any user-supplied or external URLs processed by Vert.x HttpClient are thoroughly sanitized and validated to prevent redirection to attacker-controlled destinations. This may involve updating application-specific configurations or implementing custom URL validation logic. A service restart or reload may be required for changes to take effect.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects"
},
{
"cve": "CVE-2026-15076",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-07-14T09:00:58.070373+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Vert.x Web Client. The WebClientSession component does not properly validate the Domain attribute of a Set-Cookie response header against the originating server\u0027s domain. This vulnerability allows a remote attacker to inject a cookie scoped to an arbitrary third-party domain. When the victim application subsequently sends a request to the targeted domain, the injected cookie is presented, potentially leading to information disclosure and unauthorized access to sensitive data through the attacker\u0027s account on that service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Eclipse Vert.x Web Client\u0027s `WebClientSession` component. The vulnerability arises from insufficient validation of the `Domain` attribute in `Set-Cookie` response headers, allowing a remote attacker to inject cookies scoped to arbitrary third-party domains. This could lead to sensitive data exposure and unauthorized access if a victim application subsequently sends requests to the targeted domain, presenting the attacker-controlled cookie. The impact is significant as it bypasses expected cross-domain security boundaries.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15076"
},
{
"category": "external",
"summary": "RHBZ#2499914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15076"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/162",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/162"
}
],
"release_date": "2026-07-14T08:09:12.951000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation"
},
{
"cve": "CVE-2026-16308",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-23T09:57:24.306000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506373"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine (JVM) heap memory, leading to an OutOfMemoryError. The primary consequence is a denial of service, causing the application to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Quarkus REST / RESTEasy Reactive\u0027s MultipartParser, allowing an unauthenticated remote attacker to cause a denial of service. By sending a crafted multipart/form-data request with an excessively large part-header section, the attacker can exhaust the JVM heap, leading to application crashes. This vulnerability does not require valid form field names or authentication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16308"
},
{
"category": "external",
"summary": "RHBZ#2506373",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506373"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16308"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16308",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16308"
}
],
"release_date": "2026-07-29T13:19:42.315000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34478",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-04-10T16:01:52.683616+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457323"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Log4j Core. This vulnerability allows for log injection through the use of Carriage Return Line Feed (CRLF) sequences. This occurs because security-related configuration attributes were silently renamed, impacting users who directly configure Rfc5424Layout with stream-based syslog services. An attacker could exploit this to inject malicious data into log files, potentially obscuring critical security events or manipulating system records.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability allows log injection via CRLF sequences due to silently renamed security attributes in Rfc5424Layout. This affects Red Hat products that directly configure Rfc5424Layout with stream-based syslog services, potentially enabling an attacker to obscure or manipulate log records. This impact is limited to specific configurations, as users of the SyslogAppender are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34478"
},
{
"category": "external",
"summary": "RHBZ#2457323",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457323"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34478"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34478",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34478"
},
{
"category": "external",
"summary": "https://github.com/apache/logging-log4j2/pull/4074",
"url": "https://github.com/apache/logging-log4j2/pull/4074"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/3k1clr2l6vkdnl4cbhjrnt1nyjvb5gwt",
"url": "https://lists.apache.org/thread/3k1clr2l6vkdnl4cbhjrnt1nyjvb5gwt"
},
{
"category": "external",
"summary": "https://logging.apache.org/cyclonedx/vdr.xml",
"url": "https://logging.apache.org/cyclonedx/vdr.xml"
},
{
"category": "external",
"summary": "https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout",
"url": "https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout"
},
{
"category": "external",
"summary": "https://logging.apache.org/security.html#CVE-2026-34478",
"url": "https://logging.apache.org/security.html#CVE-2026-34478"
}
],
"release_date": "2026-04-10T15:40:17.713000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames"
},
{
"cve": "CVE-2026-34480",
"cwe": {
"id": "CWE-168",
"name": "Improper Handling of Inconsistent Special Elements"
},
"discovery_date": "2026-04-10T16:02:17.024798+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457328"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Log4j Core. The XmlLayout component, responsible for formatting log messages into XML, does not properly remove or replace characters that are not allowed in XML 1.0. When log messages or diagnostic information contain these forbidden characters, the resulting XML output becomes invalid. This can lead to two main issues: either systems processing these logs will fail to read the affected records, or the logging process itself will stop delivering events, both resulting in a denial of service for logging operations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in Apache Log4j Core\u0027s XmlLayout component can lead to a denial of service in logging operations when log messages contain characters forbidden by the XML 1.0 specification. Systems processing these logs may fail to read records or the logging process may cease event delivery, impacting monitoring and auditing capabilities in affected Red Hat products. Red Hat products in their default configurations will be able to automatically recover, but some log messages may be lost.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34480"
},
{
"category": "external",
"summary": "RHBZ#2457328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457328"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34480"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34480",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34480"
},
{
"category": "external",
"summary": "https://github.com/apache/logging-log4j2/pull/4077",
"url": "https://github.com/apache/logging-log4j2/pull/4077"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/5x0hcnng0chhghp6jgjdp3qmbbhfjzhb",
"url": "https://lists.apache.org/thread/5x0hcnng0chhghp6jgjdp3qmbbhfjzhb"
},
{
"category": "external",
"summary": "https://logging.apache.org/cyclonedx/vdr.xml",
"url": "https://logging.apache.org/cyclonedx/vdr.xml"
},
{
"category": "external",
"summary": "https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout",
"url": "https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout"
},
{
"category": "external",
"summary": "https://logging.apache.org/security.html#CVE-2026-34480",
"url": "https://logging.apache.org/security.html#CVE-2026-34480"
}
],
"release_date": "2026-04-10T15:42:03.843000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging"
},
{
"cve": "CVE-2026-34481",
"cwe": {
"id": "CWE-241",
"name": "Improper Handling of Unexpected Data Type"
},
"discovery_date": "2026-04-10T16:01:44.581898+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457321"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Log4j\u0027s JsonTemplateLayout. This vulnerability allows a remote attacker to disrupt log processing systems. By sending log events that include specific non-numeric floating-point values, the attacker can cause the JsonTemplateLayout to generate invalid JSON output. This invalid output can then lead to downstream systems rejecting or failing to index these logs, effectively causing a denial of service for log analysis.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.apache.logging.log4j: Apache Log4j JsonTemplateLayout: Denial of Service via invalid JSON output",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires an application to be configured with JsonTemplateLayout and to log attacker-controlled non-finite floating-point values within a MapMessage, which is not a default or common configuration in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34481"
},
{
"category": "external",
"summary": "RHBZ#2457321",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457321"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34481"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34481",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34481"
},
{
"category": "external",
"summary": "https://github.com/apache/logging-log4j2/pull/4080",
"url": "https://github.com/apache/logging-log4j2/pull/4080"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/n34zdv00gbkdbzt2rx9rf5mqz6lhopcv",
"url": "https://lists.apache.org/thread/n34zdv00gbkdbzt2rx9rf5mqz6lhopcv"
},
{
"category": "external",
"summary": "https://logging.apache.org/cyclonedx/vdr.xml",
"url": "https://logging.apache.org/cyclonedx/vdr.xml"
},
{
"category": "external",
"summary": "https://logging.apache.org/log4j/2.x/manual/json-template-layout.html",
"url": "https://logging.apache.org/log4j/2.x/manual/json-template-layout.html"
},
{
"category": "external",
"summary": "https://logging.apache.org/security.html#CVE-2026-34481",
"url": "https://logging.apache.org/security.html#CVE-2026-34481"
}
],
"release_date": "2026-04-10T15:43:00.100000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "org.apache.logging.log4j: Apache Log4j JsonTemplateLayout: Denial of Service via invalid JSON output"
},
{
"cve": "CVE-2026-35554",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-07T14:01:09.792155+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455916"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Apache Kafka Java producer client. A race condition in the client\u0027s buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer deallocation and potential reuse by other messages. Consequently, sensitive data may be exposed to unauthorized consumers, and data integrity can be compromised through deserialization failures and processing errors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35554"
},
{
"category": "external",
"summary": "RHBZ#2455916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35554",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35554"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35554",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35554"
},
{
"category": "external",
"summary": "https://issues.apache.org/jira/browse/KAFKA-19012",
"url": "https://issues.apache.org/jira/browse/KAFKA-19012"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/f07x7j8ovyqhjd1to25jsnqbm6wj01d6",
"url": "https://lists.apache.org/thread/f07x7j8ovyqhjd1to25jsnqbm6wj01d6"
}
],
"release_date": "2026-04-07T13:07:08.679000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39852",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-04-13T13:26:46.572000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457819"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in io.quarkus:quarkus-vertx-http. A remote attacker can exploit an authorization bypass vulnerability by including semicolons, also known as matrix parameters, in HTTP requests. This allows bypassing path-based HTTP security policies, enabling unauthorized access to protected endpoints. The vulnerability arises because Quarkus\u0027s security layer performs authorization checks on the raw URL path, which preserves these matrix parameters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39852"
},
{
"category": "external",
"summary": "RHBZ#2457819",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457819"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39852"
},
{
"category": "external",
"summary": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-rc95-pcm8-65v9",
"url": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-rc95-pcm8-65v9"
}
],
"release_date": "2026-05-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure a reverse proxy or load balancer in front of the Quarkus application to normalize incoming URL paths by stripping matrix parameters (semicolons) before requests reach the Quarkus security layer. This ensures that authorization checks are performed on the intended path. Ensure that any changes to proxy configurations are thoroughly tested and services are reloaded or restarted as necessary to apply the new settings.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.quarkus:quarkus-vertx-http: io.quarkus:quarkus-vertx-http: Authorization bypass via semicolons in HTTP requests"
},
{
"cve": "CVE-2026-40983",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T05:00:52.290020+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486697"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC (gRPC Remote Procedure Call) requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service vulnerability in Micrometer, as a remote unauthenticated attacker can disrupt the availability of affected systems by sending specially crafted gRPC requests. The broad accessibility of gRPC endpoints in typical deployments contributes to the elevated risk, allowing for significant service interruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40983"
},
{
"category": "external",
"summary": "RHBZ#2486697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486697"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40983"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40983",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40983"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-40983",
"url": "https://spring.io/security/cve-2026-40983"
}
],
"release_date": "2026-06-09T03:46:54.131000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services exposing Micrometer\u0027s gRPC endpoints to trusted clients only. Implement firewall rules to limit inbound connections to the specific ports used by gRPC. If gRPC functionality is not essential for the deployment, consider disabling it entirely to eliminate the attack vector. Any changes to network configurations or service settings may require a service restart to take effect, potentially impacting availability during the transition.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests"
},
{
"cve": "CVE-2026-40984",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T05:01:51.700197+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486716"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service vulnerability in Micrometer, a component present in several Red Hat products. A remote, unauthenticated attacker can exploit this flaw by sending specially crafted HTTP requests, leading to resource exhaustion and disrupting the availability of affected services. Exploitation of this flaw requires one or more HTTP server instrumentation(s), from one of the vulnerable components, to be configured to record metrics.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40984"
},
{
"category": "external",
"summary": "RHBZ#2486716",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486716"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40984"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40984",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40984"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-40984",
"url": "https://spring.io/security/cve-2026-40984"
}
],
"release_date": "2026-06-09T03:47:46.447000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-42578",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-05-13T19:02:00.826936+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477226"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected behavior or potential bypass of security controls on the proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This vulnerability in Netty\u0027s HttpProxyHandler allows for HTTP header injection into CONNECT requests when an attacker can influence outbound headers. The handler\u0027s explicit disabling of header validation could enable proxy-related attacks, such as cache poisoning or bypassing security controls, impacting applications utilizing this component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42578"
},
{
"category": "external",
"summary": "RHBZ#2477226",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477226"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42578"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr",
"url": "https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr"
}
],
"release_date": "2026-05-13T17:57:43.538000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Applications utilizing Netty\u0027s HttpProxyHandler must ensure that any user-controlled input used to populate outbound headers is rigorously sanitized to prevent CRLF injection. If comprehensive input sanitization cannot be implemented, restricting network access to the application that uses the HttpProxyHandler can reduce the attack surface.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation"
},
{
"cve": "CVE-2026-42579",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-05-13T19:01:25.062732+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477217"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. Netty\u0027s DNS (Domain Name System) codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the encoder through user-influenced hostnames, leading to a high integrity impact on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important integrity flaw in Netty\u0027s DNS codec. The vulnerability arises from insufficient enforcement of RFC 1035 domain name constraints during both encoding and decoding, allowing remote attackers to manipulate DNS responses or user-controlled hostnames. This could lead to a high integrity impact on affected Red Hat products that utilize the vulnerable Netty DNS codec.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42579"
},
{
"category": "external",
"summary": "RHBZ#2477217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477217"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42579"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm",
"url": "https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm"
}
],
"release_date": "2026-05-13T18:01:52.500000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement"
},
{
"cve": "CVE-2026-42581",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-05-13T19:02:26.404511+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477232"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both `Transfer-Encoding: chunked` and `Content-Length` headers. While Netty correctly strips the conflicting `Content-Length` header for HTTP/1.1 messages, this guard is absent for HTTP/1.0. This can lead to HTTP request smuggling, where downstream proxies or handlers may misinterpret message boundaries, potentially allowing an attacker to bypass security controls or access unauthorized information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. Netty\u0027s HttpObjectDecoder, used across various Red Hat products, improperly handles conflicting `Transfer-Encoding: chunked` and `Content-Length` headers in HTTP/1.0 requests. This allows a remote attacker to perform HTTP request smuggling, potentially bypassing security controls or gaining unauthorized access to information due to misinterpretation of message boundaries by downstream proxies or handlers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42581"
},
{
"category": "external",
"summary": "RHBZ#2477232",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477232"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42581"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9",
"url": "https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9"
}
],
"release_date": "2026-05-13T17:54:44.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure any reverse proxies or load balancers in front of Netty to either reject HTTP/1.0 requests containing both Transfer-Encoding: chunked and Content-Length headers, or to explicitly prioritize the Transfer-Encoding header over Content-Length for HTTP/1.0 traffic. This ensures consistent interpretation of message boundaries and prevents request smuggling attacks.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers"
},
{
"cve": "CVE-2026-42583",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T19:01:32.498598+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477219"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted LZ4 compressed data stream. This can cause the Lz4FrameDecoder to allocate a large amount of memory (up to 32 MB per block) before the LZ4 decompression runs, leading to excessive memory consumption and a denial of service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Netty\u0027s LZ4FrameDecoder. The decoder allocates a buffer based on the decompressed length from the LZ4 frame header (up to 32 MB per block) before decompression runs. A remote attacker can send a small crafted LZ4 header (as few as 22 bytes) to force excessive memory allocation, leading to a denial of service. Red Hat products that use Netty with LZ4 compression enabled are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42583"
},
{
"category": "external",
"summary": "RHBZ#2477219",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477219"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42583",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42583"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42583",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42583"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6",
"url": "https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6"
}
],
"release_date": "2026-05-13T18:09:19.817000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder"
},
{
"cve": "CVE-2026-42584",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-05-13T19:01:51.846351+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477224"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses (103, followed by a 200 with a GET body, then another 200 for a HEAD request) when the client pipelines GET then HEAD requests. This can cause the HttpClientCodec to incorrectly pair responses, leading to subsequent HTTP responses being parsed from the wrong offset. This issue may result in information disclosure or other data integrity problems due to misinterpretation of network traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Netty\u0027s HttpClientCodec allows a remote attacker to cause data confusion. By sending a specially crafted sequence of HTTP responses, an attacker can cause subsequent HTTP responses to be parsed incorrectly, potentially leading to information disclosure or data integrity issues in applications utilizing Netty for HTTP client operations. This vulnerability affects various Red Hat products that bundle Netty, including Red Hat AMQ, Enterprise Application Platform, Red Hat Build of Quarkus, and Red Hat Build of Keycloak.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42584"
},
{
"category": "external",
"summary": "RHBZ#2477224",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477224"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42584",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42584"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42584",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42584"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3",
"url": "https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3"
}
],
"release_date": "2026-05-13T18:10:48.437000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion"
},
{
"cve": "CVE-2026-42587",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T19:01:35.415881+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477220"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Netty\u0027s HTTP content decompression. A remote attacker can exploit this flaw by sending specially crafted compressed payloads using Brotli, Zstandard, or Snappy encodings, bypassing configured decompression limits. This leads to unbounded memory allocation, potentially causing an out-of-memory condition and rendering affected Red Hat systems unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42587"
},
{
"category": "external",
"summary": "RHBZ#2477220",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477220"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42587",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42587"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42587",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42587"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv"
}
],
"release_date": "2026-05-13T18:22:21.699000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression"
},
{
"cve": "CVE-2026-44249",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-06-11T22:02:05.327173+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in netty-handler is rated as Important because a remote attacker can bypass configured IPv6 subnet filtering rules. This flaw, stemming from an incorrect masking operation, could allow unauthorized access to or exposure of services that are intended to be network-restricted within Red Hat products utilizing the affected Netty component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44249"
},
{
"category": "external",
"summary": "RHBZ#2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44249",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44249"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86",
"url": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86"
}
],
"release_date": "2026-06-11T20:46:14.110000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation"
},
{
"cve": "CVE-2026-44573",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:01:50.343509+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477199"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Applications utilizing the Pages Router with internationalization (i18n) configured and middleware or proxy-based authorization are susceptible to unauthorized access. A remote attacker can exploit this by making locale-less /_next/data/\u003cbuildId\u003e/\u003cpage\u003e.json requests, which bypass the intended authorization checks. This allows the attacker to retrieve sensitive server-side rendered (SSR) JSON data from protected pages, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Next.js applications allows unauthorized access to sensitive server-side rendered (SSR) JSON data by bypassing middleware authorization checks. This occurs when applications use the Pages Router with internationalization (i18n) and middleware or proxy-based authorization, enabling remote attackers to retrieve protected page data through locale-less requests.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44573"
},
{
"category": "external",
"summary": "RHBZ#2477199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477199"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44573",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44573"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44573",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44573"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5"
}
],
"release_date": "2026-05-13T16:48:16.218000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n"
},
{
"cve": "CVE-2026-44574",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:02:21.088167+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. This vulnerability allows an attacker to bypass security checks in web applications that use Next.js middleware to protect specific web pages. By sending specially crafted web addresses, an attacker can access protected content without proper authorization. This could lead to unauthorized viewing of sensitive information or access to restricted features.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Authorization bypass via crafted query parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important authorization bypass flaw in Next.js applications, which are utilized in Red Hat AMQ, Red Hat Trusted Artifact Signer, and Red Hat Enterprise Linux AI. The vulnerability arises when applications use Next.js middleware to protect dynamic routes, allowing attackers to access restricted content by manipulating query parameters. This bypass occurs because specially crafted parameters can alter the route value seen by the page while the visible path remains unchanged, circumventing intended security controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44574"
},
{
"category": "external",
"summary": "RHBZ#2477207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44574",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44574"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44574",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44574"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv"
}
],
"release_date": "2026-05-13T16:56:06.008000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Authorization bypass via crafted query parameters"
},
{
"cve": "CVE-2026-44575",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-05-13T18:01:17.168356+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477188"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. App Router applications that use middleware or proxy-based authorization checks are vulnerable to unauthorized access. A remote attacker can exploit this by crafting specific .rsc and segment-prefetch URLs, which bypass the intended middleware rules. This allows access to protected content without proper authorization.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Unauthorized access to protected content via middleware bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Next.js App Router applications that utilize middleware or proxy-based authorization. A remote attacker can bypass these security checks by crafting specific URLs, leading to unauthorized access to protected content. This is due to transport-specific route variants used for segment prefetching not being consistently matched by middleware rules.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44575"
},
{
"category": "external",
"summary": "RHBZ#2477188",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477188"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44575",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44575"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44575",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44575"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f"
}
],
"release_date": "2026-05-13T16:54:39.455000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Unauthorized access to protected content via middleware bypass"
},
{
"cve": "CVE-2026-44577",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T18:01:35.713847+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477194"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. When self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. A remote attacker could exploit this by requesting large local assets from the /_next/image endpoint. This can lead to out-of-memory conditions, resulting in a Denial of Service (DoS) for the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Denial of Service via Image Optimization API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Next.js affects self-hosted applications utilizing the default image loader. A remote attacker can trigger a denial of service by requesting large local image assets, leading to out-of-memory conditions. This vulnerability is present when `images.localPatterns` is configured to allow all patterns by default, and is not applicable when using Vercel, a custom image loader, or `images.unoptimized: true`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44577"
},
{
"category": "external",
"summary": "RHBZ#2477194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44577",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44577"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44577",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44577"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-h64f-5h5j-jqjh"
}
],
"release_date": "2026-05-13T17:00:02.786000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Denial of Service via Image Optimization API"
},
{
"cve": "CVE-2026-44578",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-05-13T18:01:13.729805+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477187"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Self-hosted applications utilizing the built-in Node.js server are vulnerable to Server-Side Request Forgery (SSRF) through specially crafted WebSocket upgrade requests. A remote attacker can exploit this by causing the server to proxy requests to arbitrary internal or external destinations. This could lead to the exposure of internal services or sensitive cloud metadata endpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Next.js affects self-hosted applications, including Red Hat AMQ, when using the built-in Node.js server. A remote attacker can exploit specially crafted WebSocket upgrade requests to perform Server-Side Request Forgery, potentially exposing internal network services or sensitive cloud metadata endpoints. This risk is specific to deployments where the origin server is directly exposed to untrusted networks.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44578"
},
{
"category": "external",
"summary": "RHBZ#2477187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44578"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44578",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44578"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r"
}
],
"release_date": "2026-05-13T17:01:38.942000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Next.js: Next.js: Server-Side Request Forgery via crafted WebSocket upgrade requests"
},
{
"cve": "CVE-2026-44579",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"discovery_date": "2026-05-13T18:01:32.406247+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477193"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open, consuming server resources and ultimately leading to a Denial of Service (DoS) for legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Denial of Service via crafted POST requests to server actions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important as Next.js applications configured with Partial Prerendering and Cache Components are susceptible to a remote denial of service. An unauthenticated attacker can exhaust server connections by sending specially crafted POST requests, leading to a complete disruption of service for legitimate users. This impact is significant due to the potential for widespread unavailability of affected web applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44579"
},
{
"category": "external",
"summary": "RHBZ#2477193",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477193"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44579"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44579",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44579"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-mg66-mrh9-m8jx"
}
],
"release_date": "2026-05-13T17:04:28.388000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Denial of Service via crafted POST requests to server actions"
},
{
"cve": "CVE-2026-44893",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-06-12T15:01:18.066312+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488383"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important because a remote, unauthenticated attacker can trigger a denial of service in applications utilizing `netty-codec-haproxy`. By sending a specially crafted HAProxy message with a malformed SSL TLV header, an attacker can cause an `IndexOutOfBoundsException`, leading to unreleased memory and resource exhaustion. This can render the affected application unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44893"
},
{
"category": "external",
"summary": "RHBZ#2488383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44893"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv"
}
],
"release_date": "2026-06-12T14:00:25.801000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message"
},
{
"cve": "CVE-2026-45109",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-13T18:01:23.402405+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477190"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. A remote unauthenticated attacker could exploit a bypass in a security fix when using middleware.ts with Turbopack. This vulnerability could lead to the disclosure of sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Next.js allows a remote unauthenticated attacker to bypass a prior security fix when applications utilize `middleware.ts` with Turbopack. This bypass undermines intended access controls, potentially leading to the exposure of sensitive information in affected Red Hat AMQ and Red Hat Trusted Artifact Signer deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45109"
},
{
"category": "external",
"summary": "RHBZ#2477190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45109"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-26hh-7cqf-hhc6"
}
],
"release_date": "2026-05-13T17:11:07.275000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next.js: Next.js: Information disclosure via security fix bypass in middleware with Turbopack"
},
{
"cve": "CVE-2026-45416",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-12T15:01:45.671884+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488391"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Netty is rated as Important. It allows a remote attacker to trigger a denial of service by sending a specially crafted TLS ClientHello message. The flaw arises from an eager, unbounded memory allocation during the TLS handshake, particularly when default configurations disable the maximum client hello length guard, leading to excessive resource consumption in affected Red Hat products utilizing Netty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45416"
},
{
"category": "external",
"summary": "RHBZ#2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45416"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh",
"url": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh"
}
],
"release_date": "2026-06-12T14:10:05.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure applications utilizing Netty\u0027s `SslClientHelloHandler` to specify a non-zero value for the `maxClientHelloLength` parameter. This will enable the internal length validation, preventing the eager allocation of large memory buffers when processing crafted TLS ClientHello messages. Refer to your specific application\u0027s documentation for details on configuring Netty\u0027s TLS handler. A restart of the affected application or service is required for the configuration changes to take effect.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake"
},
{
"cve": "CVE-2026-45674",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T15:02:15.565158+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488400"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Netty\u0027s DnsResolveContext allows a remote attacker to achieve information disclosure or data manipulation. By crafting malicious DNS responses, an attacker could redirect network traffic or intercept sensitive data, impacting applications utilizing Netty for DNS resolution in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45674"
},
{
"category": "external",
"summary": "RHBZ#2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45674"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc",
"url": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc"
}
],
"release_date": "2026-06-12T14:17:50.203000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation"
},
{
"cve": "CVE-2026-47691",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T16:02:45.855856+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488439"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Netty\u0027s DNS resolution component, `netty-resolver-dns`, allows for DNS cache poisoning. An attacker with control over an authoritative name server for a subdomain could exploit this vulnerability to inject malicious DNS records into the cache of parent domains. This could lead to redirection of network traffic, impacting the integrity and availability of services relying on DNS resolution within affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47691"
},
{
"category": "external",
"summary": "RHBZ#2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85",
"url": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85"
}
],
"release_date": "2026-06-12T14:33:16.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records"
},
{
"cve": "CVE-2026-48043",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-06-12T16:02:56.371830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488442"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in netty-codec-http2, affecting Red Hat products that utilize HTTP/2 communication with decompression. A remote attacker can exploit a resource leak in the `DelegatingDecompressorFrameListener` by sending malformed HTTP/2 frames, potentially leading to an Out Of Memory Error and causing the Java Virtual Machine to terminate. This could disrupt service availability in affected deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48043"
},
{
"category": "external",
"summary": "RHBZ#2488442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j"
}
],
"release_date": "2026-06-12T14:39:52.498000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak"
},
{
"cve": "CVE-2026-48059",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-06-12T16:02:40.032749+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Netty HAProxy PROXY protocol v2 codec, which can lead to a denial of service. A remote attacker can trigger a memory leak by sending a specially crafted HAProxy PROXY protocol v2 header with deeply nested SSL TLV records, causing resource exhaustion in affected Red Hat products that utilize this codec.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48059"
},
{
"category": "external",
"summary": "RHBZ#2488437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j"
}
],
"release_date": "2026-06-12T14:42:44.677000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers"
},
{
"cve": "CVE-2026-49978",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-07-14T21:05:26.253019+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500695"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in DOMPurify, a tool designed to sanitize HTML, MathML, and SVG to prevent cross-site scripting (XSS) attacks. When performing in-place sanitization, DOMPurify could fail to properly process content within shadow DOM elements attached to a `\u003ctemplate\u003e.content`. This oversight allows an attacker to embed malicious code, such as JavaScript, which could then execute when the sanitized template is used by an application, potentially leading to unauthorized actions or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in DOMPurify is rated as Important as it allows for cross-site scripting (XSS) attacks. When DOMPurify performs in-place sanitization, it may fail to properly process shadow DOM content within `\u003ctemplate\u003e.content`, enabling an attacker to embed and execute malicious JavaScript. This could lead to unauthorized actions or information disclosure in Red Hat products that utilize DOMPurify for sanitizing untrusted HTML, MathML, or SVG.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-49978"
},
{
"category": "external",
"summary": "RHBZ#2500695",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500695"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-49978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49978"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49978"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff",
"url": "https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7",
"url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.7"
},
{
"category": "external",
"summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq",
"url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-rp9w-3fw7-7cwq"
}
],
"release_date": "2026-07-14T20:02:46.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution"
},
{
"cve": "CVE-2026-50193",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-23T22:01:01.154533+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491999"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON (JavaScript Object Notation) data to a service that reads and processes it. This can lead to a Denial of Service (DoS) by consuming significant system resources, making the service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service flaw in jackson-databind, affecting services that process deeply nested JSON data. Exploitation occurs when a service reads JSON as `JsonNode` and subsequently writes it back using `JsonNode.toString()`, leading to excessive resource consumption and potential service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50193"
},
{
"category": "external",
"summary": "RHBZ#2491999",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491999"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50193",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50193"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c",
"url": "https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/3447",
"url": "https://github.com/FasterXML/jackson-databind/issues/3447"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh"
}
],
"release_date": "2026-06-23T21:00:20.444000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing"
},
{
"cve": "CVE-2026-50559",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-09T10:55:32.426000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486959"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Quarkus. A remote attacker could bypass HTTP path-based authorization policies by using specially crafted encoded semicolons, slashes, or backslashes in HTTP requests. This could allow unauthorized access to protected static resources, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Quarkus where HTTP path-based authorization policies can be bypassed by a remote attacker. Specially crafted HTTP requests containing encoded semicolons, slashes, or backslashes can circumvent security controls, allowing unauthorized access to protected static resources and leading to information disclosure. This is critical in deployments where Quarkus applications serve sensitive static content and rely solely on path-based authorization.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50559"
},
{
"category": "external",
"summary": "RHBZ#2486959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50559"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50559",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50559"
},
{
"category": "external",
"summary": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-qcxp-gm7m-4j5v",
"url": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-qcxp-gm7m-4j5v"
}
],
"release_date": "2026-06-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters"
},
{
"cve": "CVE-2026-54512",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-23T22:01:49.821346+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54512"
},
{
"category": "external",
"summary": "RHBZ#2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5",
"url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5988",
"url": "https://github.com/FasterXML/jackson-databind/issues/5988"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"
}
],
"release_date": "2026-06-23T20:56:36.646000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
},
{
"cve": "CVE-2026-54513",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2026-06-23T22:01:34.437620+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492010"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `jackson-databind` allows for a security bypass, enabling arbitrary code execution. The vulnerability arises from insufficient validation of array component types by `BasicPolymorphicTypeValidator`, which permits deserialization of unallowlisted types when processing untrusted input. This bypass of type validation can lead to a complete system compromise, affecting confidentiality, integrity, and availability in Red Hat products utilizing `jackson-databind` for data processing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54513"
},
{
"category": "external",
"summary": "RHBZ#2492010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5",
"url": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e",
"url": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5981",
"url": "https://github.com/FasterXML/jackson-databind/issues/5981"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5983",
"url": "https://github.com/FasterXML/jackson-databind/issues/5983"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/pull/5984",
"url": "https://github.com/FasterXML/jackson-databind/pull/5984"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f"
}
],
"release_date": "2026-06-23T20:53:52.543000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Upgrade to version 2.18.8, 2.21.4, or 3.1.4 or later to address this vulnerability. If upgrading is not immediately possible, remove BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() from the application\u2019s ObjectMapper configuration to eliminate the affected deserialization path. Rebuild and restart the application to apply the configuration change.\n\nAs an additional mitigation, disable polymorphic deserialization of untrusted data where possible by avoiding or removing default typing features such as activateDefaultTyping() or enableDefaultTyping(). When polymorphic deserialization is required, restrict allowed subtypes using a strict whitelist of trusted application packages and avoid broad or permissive type validation rules.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution"
},
{
"acknowledgments": [
{
"names": [
"Artem Cherezov (@cherez0ff)"
]
}
],
"cve": "CVE-2026-55225",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"discovery_date": "2026-05-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490275"
}
],
"notes": [
{
"category": "description",
"text": "When the Strimzi cluster operator is deployed with watchAnyNamespace=true (or a multi-namespace list), any namespace editor can set Kafka.spec.entityOperator.userOperator.watchedNamespace (or topicOperator.watchedNamespace) to an arbitrary namespace. The cluster operator then creates a Role granting full CRUD on Secrets in the target namespace and a RoleBinding pointing to a ServiceAccount in the attacker\u0027s namespace \u2014 effectively granting cluster-admin-equivalent access via kube-system secret exfiltration. The RBAC objects created cross-namespace have their ownerReferences deliberately stripped, making the privilege grant persistent even after the Kafka CR or attacker namespace is deleted. Fixed in Strimzi 1.0.1 and 1.1.0 by adding a dedicated environment variable to explicitly enable the watched namespace feature (disabled by default).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "strimzi-cluster-operator: Cross-namespace privilege escalation via Kafka.spec.entityOperator.watchedNamespace in Strimzi",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55225"
},
{
"category": "external",
"summary": "RHBZ#2490275",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490275"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55225",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55225"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55225",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55225"
},
{
"category": "external",
"summary": "https://github.com/strimzi/strimzi-kafka-operator/releases/tag/1.0.1",
"url": "https://github.com/strimzi/strimzi-kafka-operator/releases/tag/1.0.1"
},
{
"category": "external",
"summary": "https://github.com/strimzi/strimzi-kafka-operator/security/advisories/GHSA-mw9r-p8xp-wx96",
"url": "https://github.com/strimzi/strimzi-kafka-operator/security/advisories/GHSA-mw9r-p8xp-wx96"
}
],
"release_date": "2026-06-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "For users who cannot upgrade immediately, deploy a Kubernetes admission policy agent (such as Kyverno or OPA Gatekeeper) to block or restrict the use of the `watchedNamespace` field in Kafka custom resources (`Kafka.spec.entityOperator.userOperator.watchedNamespace` and `Kafka.spec.entityOperator.topicOperator.watchedNamespace`). Additionally, audit existing Kafka custom resources for unexpected `watchedNamespace` configurations and review RoleBindings in sensitive namespaces.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "strimzi-cluster-operator: Cross-namespace privilege escalation via Kafka.spec.entityOperator.watchedNamespace in Strimzi"
},
{
"cve": "CVE-2026-55831",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-21T00:02:57.305291+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503103"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service (DoS) due to heap growth and increased CPU usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in Netty\u0027s SPDY SETTINGS decoder, allowing a remote unauthenticated attacker to exhaust system resources. By sending a specially crafted SPDY/3.1 SETTINGS frame, an attacker can cause excessive memory allocation and CPU usage, leading to a denial of service. This vulnerability has a low attack complexity and requires no user interaction or privileges.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55831"
},
{
"category": "external",
"summary": "RHBZ#2503103",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503103"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55831"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b",
"url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
"url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w",
"url": "https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w"
}
],
"release_date": "2026-07-20T23:00:31.859000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing"
},
{
"cve": "CVE-2026-55833",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-07-21T00:01:25.203265+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503101"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to excessive CPU usage and memory allocation. This can result in a denial of service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Netty\u0027s SPDY header decoding. A remote, unauthenticated attacker can send a small, compressed SPDY header block that, during decompression, expands significantly beyond configured limits. This leads to excessive CPU and memory consumption, potentially causing resource exhaustion and service unavailability in affected Red Hat products that utilize Netty with SPDY.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55833"
},
{
"category": "external",
"summary": "RHBZ#2503101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503101"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55833"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b",
"url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
"url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c",
"url": "https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c"
}
],
"release_date": "2026-07-20T23:18:07.893000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification"
},
{
"cve": "CVE-2026-56745",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-07-21T22:52:47.296001+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2505911"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty\u0027s SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory if the stream is reset or content limits are exceeded. This oversight leads to native memory exhaustion, which can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Netty\u0027s SPDY-to-HTTP codec, affecting Red Hat products that utilize vulnerable versions of Netty. A remote, unauthenticated attacker can exploit a memory leak in the `SpdyHttpDecoder` by sending specially crafted `SYN_STREAM` frames, leading to native memory exhaustion and a denial of service for the affected system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56745"
},
{
"category": "external",
"summary": "RHBZ#2505911",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505911"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56745"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56745"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b",
"url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
"url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq",
"url": "https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq"
}
],
"release_date": "2026-07-21T21:31:25.307000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec"
},
{
"cve": "CVE-2026-56746",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-21T22:30:30.983812+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2505422"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the backend application. This could lead to a compromise of data integrity by allowing unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat ships Netty\u0027s netty-codec-http component in multiple products. The CorsHandler shortCircuit() feature, when enabled, is intended to reject unauthorized cross-origin requests before they reach the application. Due to a logical operator error in origin validation, requests with a null Origin header bypass this protection entirely. Upgrade to Netty 4.1.136.Final or 4.2.16.Final to resolve this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56746"
},
{
"category": "external",
"summary": "RHBZ#2505422",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505422"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56746",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56746"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56746",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56746"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5",
"url": "https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5"
}
],
"release_date": "2026-07-21T21:36:18.627000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "If CORS short-circuit functionality is not required, disable the shortCircuit() configuration in the CorsHandler. Alternatively, implement application-level origin validation to reject requests with null Origin headers. A web application firewall (WAF) can also be configured to block requests with null or missing Origin headers.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header"
},
{
"cve": "CVE-2026-56819",
"cwe": {
"id": "CWE-911",
"name": "Improper Update of Reference Count"
},
"discovery_date": "2026-07-21T23:03:36.448652+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2505980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing the application to crash and resulting in a Denial of Service (DoS). The issue occurs because the framework fails to release retained memory buffers when processing DATA frames for a stream whose decompressor has already been closed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Netty\u0027s HTTP/2 codec, which could lead to a denial of service. Red Hat products utilizing netty-codec-http2 with HTTP/2 content decompression enabled are susceptible to memory exhaustion when processing specially crafted HTTP/2 DATA frames. This allows a remote attacker to leak memory buffers, eventually exhausting available memory and impacting system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56819"
},
{
"category": "external",
"summary": "RHBZ#2505980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2505980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56819"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6",
"url": "https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.136.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972",
"url": "https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972"
}
],
"release_date": "2026-07-21T22:11:17.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak"
},
{
"cve": "CVE-2026-59869",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:38.408322+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "RHBZ#2498122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
}
],
"release_date": "2026-07-08T15:15:54.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
},
{
"cve": "CVE-2026-59899",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-07-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507482"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Netty netty-codec-http component. A remote attacker can send HTTP requests containing highly compressed data. The HTTP decoder in netty-codec-http fails to properly limit the decompression of this content, causing the system to consume excessive memory. This can lead to memory exhaustion and a denial of service (DoS), making the service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Netty\u0027s HTTP decoder, which could lead to a denial of service. Red Hat products utilizing `netty-codec-http` are susceptible to memory exhaustion when processing specially crafted, highly compressed HTTP payloads. This allows a remote attacker to trigger excessive memory allocation, impacting system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59899"
},
{
"category": "external",
"summary": "RHBZ#2507482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59899"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59899",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59899"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww",
"url": "https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww"
},
{
"category": "external",
"summary": "https://netty.io/news/2026/07/09/4-1-136-Final.html",
"url": "https://netty.io/news/2026/07/09/4-1-136-Final.html"
}
],
"release_date": "2026-07-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)"
},
{
"cve": "CVE-2026-59901",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507481"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the netty-codec-compression component of Netty. This vulnerability, caused by a logic error in the bzip2 decoder, allows a remote attacker to send specially crafted bzip2-compressed data. Processing this malformed data can trigger an infinite loop, causing the decoder thread to consume excessive CPU resources. This leads to a denial of service (DoS), requiring manual intervention to restore service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59901"
},
{
"category": "external",
"summary": "RHBZ#2507481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507481"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59901"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59901",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59901"
}
],
"release_date": "2026-07-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)"
},
{
"cve": "CVE-2026-64641",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-27T19:01:55.168844+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507613"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js, a React framework for building web applications. A remote attacker can send specially crafted requests to Next.js applications that utilize the App Router with Server Actions. This can lead to excessive CPU usage, causing the application to become unresponsive and preventing it from processing further requests, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next: Next.js: Denial of Service via crafted requests to App Router with Server Actions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw exists in Next.js applications utilizing the App Router with Server Actions. Crafted requests can lead to excessive CPU consumption, potentially disrupting service availability for affected Red Hat products that embed or depend on vulnerable Next.js versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64641"
},
{
"category": "external",
"summary": "RHBZ#2507613",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507613"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64641",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64641"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64641",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64641"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/commit/019628571641dec57aaf349ba0c360e3964e6f12",
"url": "https://github.com/vercel/next.js/commit/019628571641dec57aaf349ba0c360e3964e6f12"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/pull/96013",
"url": "https://github.com/vercel/next.js/pull/96013"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
"url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
"url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-m99w-x7hq-7vfj",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-m99w-x7hq-7vfj"
}
],
"release_date": "2026-07-27T17:40:01.137000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next: Next.js: Denial of Service via crafted requests to App Router with Server Actions"
},
{
"cve": "CVE-2026-64644",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-27T19:02:34.216404+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js, a React framework. When self-hosting Next.js with the default image loader and configured to optimize remotely hosted images, a remote attacker could exploit the Image Optimization API. By providing malicious images, the attacker can cause CPU exhaustion, leading to a Denial of Service (DoS) in the /_next/image endpoints. This vulnerability specifically affects configurations using config.images.remotePatterns.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next: Next.js: Denial of Service via malicious image optimization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Next.js applications. When self-hosting Next.js with the default image loader, the Image Optimization API can be exploited if the `config.images.remotePatterns` option is explicitly configured to optimize remotely hosted, malicious images. This configuration is not enabled by default in Red Hat supported products, limiting exposure to environments where this specific feature has been activated.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64644"
},
{
"category": "external",
"summary": "RHBZ#2507624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64644",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64644"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64644",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64644"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/commit/93cb90891402fa4c47798d03cb9e05c13233766c",
"url": "https://github.com/vercel/next.js/commit/93cb90891402fa4c47798d03cb9e05c13233766c"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/pull/96006",
"url": "https://github.com/vercel/next.js/pull/96006"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
"url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
"url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-q8wf-6r8g-63ch",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-q8wf-6r8g-63ch"
}
],
"release_date": "2026-07-27T17:54:52.530000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next: Next.js: Denial of Service via malicious image optimization"
},
{
"cve": "CVE-2026-64645",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-07-27T19:02:11.616505+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507618"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js, a React framework for building web applications. This vulnerability allows a remote attacker to perform Server-Side Request Forgery (SSRF) or Open Redirect attacks. When a `rewrites()` or `redirects()` rule constructs an external destination hostname using attacker-controlled input, the application can be coerced into proxying requests to arbitrary hosts, leading to SSRF. Additionally, this misconfiguration can result in Open Redirects, potentially exposing users to phishing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next: Next.js: Server-Side Request Forgery vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Next.js applications arises when `rewrites()` or `redirects()` rules construct external destination hostnames from untrusted input. An attacker could exploit this to perform Server-Side Request Forgery (SSRF), potentially accessing internal network resources, or to facilitate Open Redirect attacks, leading to user redirection to malicious sites. The impact is contingent on the application\u0027s specific routing configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64645"
},
{
"category": "external",
"summary": "RHBZ#2507618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64645"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64645",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64645"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/commit/35f501357e9b0fe7c950b0d6aa8fcf5343f707e9",
"url": "https://github.com/vercel/next.js/commit/35f501357e9b0fe7c950b0d6aa8fcf5343f707e9"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/commit/d3033266c6dff23f7be71e19341fe3a8c6e2c599",
"url": "https://github.com/vercel/next.js/commit/d3033266c6dff23f7be71e19341fe3a8c6e2c599"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
"url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
"url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-p9j2-gv94-2wf4",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-p9j2-gv94-2wf4"
}
],
"release_date": "2026-07-27T17:37:07.695000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next: Next.js: Server-Side Request Forgery vulnerability"
},
{
"cve": "CVE-2026-64646",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-27T20:01:22.761489+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507643"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. An attacker sending specially crafted requests to a Next.js application utilizing the App Router with Server Actions configured to use the Edge runtime can cause excessive memory consumption. This can lead to a denial of service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next: Next.js: Denial of Service via excessive memory consumption in Server Actions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important denial of service flaw exists in Next.js applications utilizing the App Router with Server Actions configured to use the Edge runtime. This vulnerability can lead to excessive memory consumption, potentially causing service unavailability. Red Hat products that embed or deploy Next.js applications with this specific configuration are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64646"
},
{
"category": "external",
"summary": "RHBZ#2507643",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507643"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64646"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64646",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64646"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/commit/57c31f724d746e86a9e8b92aa8be538a922446a4",
"url": "https://github.com/vercel/next.js/commit/57c31f724d746e86a9e8b92aa8be538a922446a4"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/commit/9a4651e754f70b12e397694ffc41f44c3ba8cc17",
"url": "https://github.com/vercel/next.js/commit/9a4651e754f70b12e397694ffc41f44c3ba8cc17"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
"url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
"url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-4c39-4ccg-62r3",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-4c39-4ccg-62r3"
}
],
"release_date": "2026-07-27T18:54:59.466000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next: Next.js: Denial of Service via excessive memory consumption in Server Actions"
},
{
"cve": "CVE-2026-64648",
"cwe": {
"id": "CWE-524",
"name": "Use of Cache Containing Sensitive Information"
},
"discovery_date": "2026-07-27T20:01:18.170062+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507642"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js. A remote attacker could exploit a vulnerability in the server-side fetch mechanism, where a request with a body might receive a cached response intended for a different request to the same URL but different body. This could lead to the unauthorized disclosure of confidential data from POST request response bodies to an unprivileged user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next: Next.js: Information disclosure via server-side fetch cache",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Next.js arises from a server-side fetch cache confusion, potentially leaking confidential data from POST response bodies to unauthorized requests. The vulnerability is triggered by specific unsafe fetch patterns where the request object\u0027s initialization differs from the fetch call\u0027s initialization. Red Hat customers using Next.js applications should review their fetch implementations, noting that applications built with Pages Router are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64648"
},
{
"category": "external",
"summary": "RHBZ#2507642",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507642"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64648"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64648",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64648"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/commit/062f66700b52a5d6bba2c0605d55577ab7ad262c",
"url": "https://github.com/vercel/next.js/commit/062f66700b52a5d6bba2c0605d55577ab7ad262c"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/commit/73b94872bc343d09494b50394d8c08eb9fc8e56a",
"url": "https://github.com/vercel/next.js/commit/73b94872bc343d09494b50394d8c08eb9fc8e56a"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
"url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
"url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-68g3-v927-f742",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-68g3-v927-f742"
}
],
"release_date": "2026-07-27T19:20:42.623000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next: Next.js: Information disclosure via server-side fetch cache"
},
{
"cve": "CVE-2026-64649",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-07-27T20:01:07.078524+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507639"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Next.js, a framework for building web applications. A remote attacker can exploit this vulnerability by manipulating Host-associated headers when a Server Action forwards or redirects a request. This can lead to Server-Side Request Forgery (SSRF), where the server is tricked into making requests to an attacker-controlled host. Such an attack could potentially expose internal system information or bypass authorization controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "next: Next.js: Server-Side Request Forgery via malicious host redirection in Server Actions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important Server-Side Request Forgery (SSRF) flaw in Next.js Server Actions allows an attacker to redirect outbound requests to a malicious host. This is particularly relevant for Red Hat customers deploying Next.js applications on custom servers or without a proxy that enforces host header validation, as it could lead to unauthorized internal network access or information disclosure. Managed hosting environments and applications using `next start` or standalone output from version 14.2 onwards are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64649"
},
{
"category": "external",
"summary": "RHBZ#2507639",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507639"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64649"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64649",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64649"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/commit/b51206321854193208c0805ba42acc49287f942b",
"url": "https://github.com/vercel/next.js/commit/b51206321854193208c0805ba42acc49287f942b"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/commit/e3e5666ccead3a15162793d697af5e48b7cc0498",
"url": "https://github.com/vercel/next.js/commit/e3e5666ccead3a15162793d697af5e48b7cc0498"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v15.5.21",
"url": "https://github.com/vercel/next.js/releases/tag/v15.5.21"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/releases/tag/v16.2.11",
"url": "https://github.com/vercel/next.js/releases/tag/v16.2.11"
},
{
"category": "external",
"summary": "https://github.com/vercel/next.js/security/advisories/GHSA-89xv-2m56-2m9x",
"url": "https://github.com/vercel/next.js/security/advisories/GHSA-89xv-2m56-2m9x"
}
],
"release_date": "2026-07-27T19:27:58.865000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "next: Next.js: Server-Side Request Forgery via malicious host redirection in Server Actions"
},
{
"cve": "CVE-2026-69153",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-08-03T18:01:01.506065+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510719"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the \u0027from\u0027 parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application\u0027s source code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Moderate because the information disclosed is limited to files with a .map extension. Source map files may contain source code paths and content, but the attacker cannot read arbitrary files on the system. Exploitation requires the application to process attacker-controlled CSS through PostCSS on the server side.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Streams for Apache Kafka 3.2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69153"
},
{
"category": "external",
"summary": "RHBZ#2510719",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510719"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69153",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69153"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69153",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69153"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8",
"url": "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/releases/tag/8.5.19",
"url": "https://github.com/postcss/postcss/releases/tag/8.5.19"
},
{
"category": "external",
"summary": "https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp",
"url": "https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp"
}
],
"release_date": "2026-08-03T16:56:25.733000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T19:35:14+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"category": "workaround",
"details": "Pass map: false when invoking PostCSS to disable source map auto-loading. This prevents the path traversal from being triggered, though it removes source map support entirely.",
"product_ids": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Streams for Apache Kafka 3.2.1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL"
}
]
}
RHSA-2026:54441
Vulnerability from csaf_redhat - Published: 2026-08-12 22:23 - Updated: 2026-08-29 02:43Summary
Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update
Severity
Important
Notes
Topic: An update is now available for Red Hat Lightspeed (formerly Insights) for Runtimes on RHEL 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: An update is now available for Red Hat Lightspeed (formerly Insights) for Runtimes on RHEL 9.
Security fix(es):
* golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering (CVE-2026-42502)
* golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
* golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)
* golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64 | — |
Workaround
|
Threats
Impact
Moderate
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat Lightspeed (formerly Insights) for Runtimes on RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for Red Hat Lightspeed (formerly Insights) for Runtimes on RHEL 9.\n\nSecurity fix(es):\n\n* golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering (CVE-2026-42502)\n* golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n* golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)\n* golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54441",
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54441.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update",
"tracking": {
"current_release_date": "2026-08-29T02:43:50+00:00",
"generator": {
"date": "2026-08-29T02:43:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54441",
"initial_release_date": "2026-08-12T22:23:05+00:00",
"revision_history": [
{
"date": "2026-08-12T22:23:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T02:43:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"product": {
"name": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Lightspeed (formerly Insights) for Runtimes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"product": {
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"product_id": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/runtimes-inventory-rhel9-operator@sha256%3A1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9?arch=amd64\u0026repository_url=registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\u0026tag=1786483782"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"product": {
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"product_id": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/runtimes-inventory-operator-bundle@sha256%3A2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e?arch=amd64\u0026repository_url=registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle\u0026tag=1786485353"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64",
"product": {
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64",
"product_id": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64",
"product_identification_helper": {
"purl": "pkg:oci/runtimes-inventory-rhel9-operator@sha256%3Aed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527?arch=arm64\u0026repository_url=registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\u0026tag=1786483782"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"product": {
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"product_id": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/runtimes-inventory-rhel9-operator@sha256%3A715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab?arch=ppc64le\u0026repository_url=registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\u0026tag=1786483782"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"product": {
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"product_id": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"product_identification_helper": {
"purl": "pkg:oci/runtimes-inventory-rhel9-operator@sha256%3A1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22?arch=s390x\u0026repository_url=registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\u0026tag=1786483782"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64 as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
},
"product_reference": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"relates_to_product_reference": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64 as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64"
},
"product_reference": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"relates_to_product_reference": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x"
},
"product_reference": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"relates_to_product_reference": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le"
},
"product_reference": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"relates_to_product_reference": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64 as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
},
"product_reference": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64",
"relates_to_product_reference": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"known_not_affected": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T22:23:05+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"known_not_affected": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T22:23:05+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"known_not_affected": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T22:23:05+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"known_not_affected": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T22:23:05+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"known_not_affected": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T22:23:05+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"known_not_affected": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T22:23:05+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-operator-bundle@sha256:2769366b1658bf14b727560d72529517c5d0c0e6982c756d50878b1845c3215e_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1764d020e1189c01f154dcf82c554f6bd7f95ba4377c2a47976053c46dc7e1e9_amd64",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:1ccd0a4e337d93f9b3a45b03328016e8f4738033c69335f6b6d62eb8ae52eb22_s390x",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:715794cf99699a378ed29f336692b82c70c9ba8b18e10c1b572510ec646318ab_ppc64le",
"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator@sha256:ed4bc7c60b2dee49a5ac71f15936324a039638669266b644899cc70c6225c527_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
}
]
}
RHSA-2026:54531
Vulnerability from csaf_redhat - Published: 2026-08-13 10:51 - Updated: 2026-08-29 02:43Summary
Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1
Severity
Important
Notes
Topic: cert-manager Operator for Red Hat OpenShift 1.19.1
Details: The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities
and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide
certificates-as-a-service to developers working within your Kubernetes cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — | ||
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — | ||
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — | ||
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
111 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "cert-manager Operator for Red Hat OpenShift 1.19.1",
"title": "Topic"
},
{
"category": "general",
"text": "The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities\nand certificates as first-class resource types in the Kubernetes API. This makes it possible to provide\ncertificates-as-a-service to developers working within your Kubernetes cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54531",
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html",
"url": "https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54531.json"
}
],
"title": "Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1",
"tracking": {
"current_release_date": "2026-08-29T02:43:51+00:00",
"generator": {
"date": "2026-08-29T02:43:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54531",
"initial_release_date": "2026-08-13T10:51:40+00:00",
"revision_history": [
{
"date": "2026-08-13T10:51:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T02:43:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cert Manager support for Red Hat OpenShift release 1.19",
"product": {
"name": "Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cert_manager:1.19::el9"
}
}
}
],
"category": "product_family",
"name": "Cert Manager support for Red Hat OpenShift release"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2?arch=amd64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3A0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2?arch=amd64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd?arch=s390x\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3Ab574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3?arch=s390x\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da?arch=ppc64le\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3Aa16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6?arch=ppc64le\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4?arch=arm64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3A5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90?arch=arm64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:54580
Vulnerability from csaf_redhat - Published: 2026-08-18 12:14 - Updated: 2026-08-27 15:28Summary
Red Hat Security Advisory: OpenShift Container Platform 4.20.34 packages and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.20.34 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container
Platform 4.20.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.20.34. See the following advisory for the container images for
this release:
https://access.redhat.com/errata/RHSA-2026:54583
Security Fix(es):
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege
escalation via incorrect Punycode label processing (CVE-2026-39821)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.20 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.20.34 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container\nPlatform 4.20.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container\nPlatform 4.20.34. See the following advisory for the container images for\nthis release:\n\nhttps://access.redhat.com/errata/RHSA-2026:54583\n\nSecurity Fix(es):\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege\nescalation via incorrect Punycode label processing (CVE-2026-39821)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.20 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54580",
"url": "https://access.redhat.com/errata/RHSA-2026:54580"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54580.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.20.34 packages and security update",
"tracking": {
"current_release_date": "2026-08-27T15:28:27+00:00",
"generator": {
"date": "2026-08-27T15:28:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54580",
"initial_release_date": "2026-08-18T12:14:04+00:00",
"revision_history": [
{
"date": "2026-08-18T12:14:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-18T12:14:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-27T15:28:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.20",
"product": {
"name": "Red Hat OpenShift Container Platform 4.20",
"product_id": "8Base-RHOSE-4.20",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.20::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.20",
"product": {
"name": "Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.20::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src",
"product": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src",
"product_id": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.20.0-202608101541.p2.g1367d50.assembly.stream.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src",
"product": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src",
"product_id": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.20.0-202608101541.p2.g1367d50.assembly.stream.el9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"product": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"product_id": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.20.0-202608101541.p2.g1367d50.assembly.stream.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"product": {
"name": "openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"product_id": "openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.20.0-202608101541.p2.g1367d50.assembly.stream.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"product": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"product_id": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.20.0-202608101541.p2.g1367d50.assembly.stream.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"product": {
"name": "openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"product_id": "openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.20.0-202608101541.p2.g1367d50.assembly.stream.el9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64",
"product": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64",
"product_id": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.20.0-202608101541.p2.g1367d50.assembly.stream.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64",
"product": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64",
"product_id": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.20.0-202608101541.p2.g1367d50.assembly.stream.el9?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le",
"product": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le",
"product_id": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.20.0-202608101541.p2.g1367d50.assembly.stream.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le",
"product": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le",
"product_id": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.20.0-202608101541.p2.g1367d50.assembly.stream.el9?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x",
"product": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x",
"product_id": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.20.0-202608101541.p2.g1367d50.assembly.stream.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x",
"product": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x",
"product_id": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.20.0-202608101541.p2.g1367d50.assembly.stream.el9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64"
},
"product_reference": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le"
},
"product_reference": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x"
},
"product_reference": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src"
},
"product_reference": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64"
},
"product_reference": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "8Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64"
},
"product_reference": "openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64"
},
"product_reference": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le"
},
"product_reference": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x"
},
"product_reference": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src"
},
"product_reference": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src",
"relates_to_product_reference": "9Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64"
},
"product_reference": "openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.20"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.20",
"product_id": "9Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64"
},
"product_reference": "openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.20"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-18T12:14:04+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/",
"product_ids": [
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54580"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.s390x",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.src",
"8Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.s390x",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.src",
"9Base-RHOSE-4.20:openshift-clients-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.20:openshift-clients-redistributable-0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
RHSA-2026:54757
Vulnerability from csaf_redhat - Published: 2026-08-13 23:45 - Updated: 2026-08-29 02:43Summary
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory
Severity
Important
Notes
Topic: An update for Red Hat OpenStack Platform 16.2 (Train) is now available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.
Security Fix(es):
* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova (CVE-2026-24708)
* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)
* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
* crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption (CVE-2025-68121)
* openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access (CVE-2026-34881)
* crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)
* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* etcd: etcd: Authorization bypass allows information disclosure and denial of service (CVE-2026-33413)
* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
* golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation (CVE-2026-42789)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification (CVE-2026-44393)
* erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing (CVE-2026-42790)
* openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw (CVE-2025-65073)
* OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation (CVE-2026-43001)
* openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation (CVE-2026-33551)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack's Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS (Amazon Web Services) signature to the /v3/ec2tokens or /v3/s3tokens API (Application Programming Interface) endpoints.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Moderate
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
Known not affected
211 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw disk and trigger destructive behavior during instance operations such as resize.
7.1 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
206 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
214 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lease management, and trigger data compaction, leading to permanent data loss and disruption of critical workflows. This vulnerability can result in information disclosure and denial of service.
7.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full set of the parent user's S3 permissions. This effectively bypasses the role restrictions imposed on the application credential, leading to unauthorized access and privilege escalation. This issue affects deployments that use restricted application credentials in combination with the EC2/S3 compatibility API.
CWE-266 - Incorrect Privilege AssignmentAffected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Low
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenStack Glance. An authenticated user can exploit a Server-Side Request Forgery (SSRF) vulnerability within the web-download import feature. This vulnerability stems from inadequate validation of Uniform Resource Identifiers (URIs), which can be circumvented using HTTP redirects or alternative IP encodings. Successful exploitation allows an attacker to gain unauthorized access to internal network resources and potentially exfiltrate sensitive data.
7.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Erlang OTP's public_key module. This vulnerability (CWE-295), related to improper certificate validation, allows a non-Certificate Authority (CA) certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can exploit this by forging leaf certificates for arbitrary identities. This can lead to compromised server identity verification on the client side and client certificate verification on mutual Transport Layer Security (mTLS) servers, undermining the trust in certificate-based authentication.
8.0 (High)
Affected products
Fixed
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
158 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Erlang OTP public_key. This improper certificate validation vulnerability allows a subordinate Certificate Authority (CA) with restricted DNS nameConstraints to bypass these restrictions. By issuing a leaf certificate that lacks a Subject Alternative Name (SAN) but contains a crafted CommonName (CN), an attacker can trick an Erlang OTP TLS client into accepting it as valid for an out-of-scope hostname. This can lead to hostname spoofing and potential man-in-the-middle attacks, compromising the integrity and confidentiality of communications.
7.4 (High)
Affected products
Fixed
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
158 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied project_id for an EC2-type credential was not validated against the project of the authenticating application credential. This allows the attacker to create an EC2 credential targeting a different project. Subsequently, a /v3/ec2tokens exchange would issue a Keystone token scoped to the targeted project, enabling unauthorized cross-project access and lateral movement within the credential owner's role footprint.
8.0 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS (Transport Layer Security) connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonate the RabbitMQ broker. This allows the attacker to perform a man-in-the-middle attack, potentially leading to the disclosure or manipulation of sensitive RPC (Remote Procedure Call) and notification traffic.
7.4 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
213 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
References
199 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat OpenStack Platform 16.2 (Train) is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.\n\nSecurity Fix(es):\n\n* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n\n* openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova (CVE-2026-24708)\n\n* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)\n\n* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n\n* crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption (CVE-2025-68121)\n\n* openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access (CVE-2026-34881)\n\n* crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* etcd: etcd: Authorization bypass allows information disclosure and denial of service (CVE-2026-33413)\n\n* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n\n* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n\n* golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n\n* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n\n* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation (CVE-2026-42789)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\n* oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification (CVE-2026-44393)\n\n* erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing (CVE-2026-42790)\n\n* openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw (CVE-2025-65073)\n\n* OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation (CVE-2026-43001)\n\n* openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation (CVE-2026-33551)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54757",
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2415344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415344"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2430312",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430312"
},
{
"category": "external",
"summary": "2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "2440368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440368"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2451037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451037"
},
{
"category": "external",
"summary": "2451728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451728"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2464305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464305"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2482093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482093"
},
{
"category": "external",
"summary": "2482286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482286"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2484835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484835"
},
{
"category": "external",
"summary": "OSPRH-20808",
"url": "https://issues.redhat.com/browse/OSPRH-20808"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54757.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory",
"tracking": {
"current_release_date": "2026-08-29T02:43:53+00:00",
"generator": {
"date": "2026-08-29T02:43:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54757",
"initial_release_date": "2026-08-13T23:45:16+00:00",
"revision_history": [
{
"date": "2026-08-13T23:45:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-13T23:45:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T02:43:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"product": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"product_id": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility@0.2.1-1.1.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pyasn1-0:0.4.6-4.el8ost.src",
"product": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src",
"product_id": "python-pyasn1-0:0.4.6-4.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pyasn1@0.4.6-4.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "erlang-0:23.3.4.18-2.el8ost.src",
"product": {
"name": "erlang-0:23.3.4.18-2.el8ost.src",
"product_id": "erlang-0:23.3.4.18-2.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang@23.3.4.18-2.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"product": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"product_id": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-glance@19.0.5-2.20260512165254.eb6ad61.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"product": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"product_id": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-cinder@15.6.1-2.20250708154832.299553a.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"product": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"product_id": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova@20.6.2-2.20260317135026.8a24acd.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"product": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"product_id": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common@11.7.1-2.20251029134905.e189622.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"product": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"product_id": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-haproxy@4.1.1-2.20250728141134.df96ffc.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"product": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"product_id": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-git@0.5.0-2.20250728140843.4e4498e.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"product": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"product_id": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-keystone@16.0.3-2.20260616134936.9d699a7.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"product": {
"name": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"product_id": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift@2.23.4-2.20260121154927.70b68db.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"product": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"product_id": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-inifile@3.1.1-2.20250728133040.91efced.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"product": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"product_id": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-module-data@0.5.1-2.20250728142646.28dafce.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"product": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"product_id": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-apache@5.1.1-2.20250728133931.1fa9b1c.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"product": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"product_id": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-java@5.0.2-2.20250804144904.e57cbc8.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"product": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"product_id": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-corosync@6.0.2-2.20250728134759.961add3.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"product": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"product_id": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-datacat@0.6.3-2.20250728140400.5cce8f2.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"product": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"product_id": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@11.6.1-2.20251125134914.9adcac6.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"product": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"product_id": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tempest@26.1.0-2.20250728145114.271f820.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"product": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"product_id": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-firewall@3.4.1-2.20250728144450.94f707c.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"product": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"product_id": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-concat@6.1.1-2.20250728133127.9baa8fc.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"product": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"product_id": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-ipaclient@2.5.2-2.20250728141812.b086731.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"product": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"product_id": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-keepalived@0.0.2-2.20250728142002.bbca37a.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"product": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"product_id": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-stdlib@6.1.1-2.20250728131928.5aa891c.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"product": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"product_id": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-rabbitmq@10.1.2-2.20250728144344.8b9b006.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"product": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"product_id": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-remote@10.0.0-2.20250728135533.7420908.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"product": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"product_id": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-staging@1.0.5-2.20250728134218.b466d93.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"product": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"product_id": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-snmp@3.9.1-2.20250728142735.5d73485.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"product": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"product_id": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-vcsrepo@3.0.1-2.20250728140014.b06d5d3.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"product": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"product_id": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-tomcat@3.1.1-2.20250804144904.a3f92d1.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"product": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"product_id": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-xinetd@3.3.1-2.20250728135145.d768da2.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"product": {
"name": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"product_id": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-collectd-gnocchi@1.7.2-2.20250728143604.de115a7.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"product": {
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"product_id": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-gnocchiclient@7.0.4-2.20250728131928.64814b9.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"product": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"product_id": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-messaging@10.2.4-2.20260710155333.82281a0.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"product": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"product_id": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tripleo-ansible@0.8.1-2.20260112154909.123ce73.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "etcd-0:3.3.23-22.el8ost.src",
"product": {
"name": "etcd-0:3.3.23-22.el8ost.src",
"product_id": "etcd-0:3.3.23-22.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.3.23-22.el8ost?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"product": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"product_id": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility@0.2.1-1.1.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"product": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"product_id": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility-debuginfo@0.2.1-1.1.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-compiler@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-eldap@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-hipe@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-inets@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-kernel@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-mnesia@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-parsetools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-public_key@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-sasl@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-snmp@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-ssl@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-stdlib@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-syntax_tools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-xmerl@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debugsource@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erl_interface-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-odbc-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-0:3.3.23-22.el8ost.x86_64",
"product": {
"name": "etcd-0:3.3.23-22.el8ost.x86_64",
"product_id": "etcd-0:3.3.23-22.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.3.23-22.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"product": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"product_id": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debugsource@3.3.23-22.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"product": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"product_id": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debuginfo@3.3.23-22.el8ost?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"product": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"product_id": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility@0.2.1-1.1.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"product": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"product_id": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility-debuginfo@0.2.1-1.1.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-compiler@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-eldap@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-hipe@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-inets@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-kernel@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-mnesia@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-parsetools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-public_key@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-sasl@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-snmp@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-ssl@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-stdlib@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-syntax_tools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-xmerl@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debugsource@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erl_interface-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-odbc-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "etcd-0:3.3.23-22.el8ost.ppc64le",
"product": {
"name": "etcd-0:3.3.23-22.el8ost.ppc64le",
"product_id": "etcd-0:3.3.23-22.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.3.23-22.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"product": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"product_id": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debugsource@3.3.23-22.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"product": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"product_id": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debuginfo@3.3.23-22.el8ost?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"product": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"product_id": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pyasn1@0.4.6-4.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"product": {
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"product_id": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pyasn1-modules@0.4.6-4.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_id": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-glance@19.0.5-2.20260512165254.eb6ad61.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product": {
"name": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_id": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-glance@19.0.5-2.20260512165254.eb6ad61.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_id": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-cinder@15.6.1-2.20250708154832.299553a.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product": {
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_id": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-cinder@15.6.1-2.20250708154832.299553a.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-api@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-common@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-compute@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-conductor@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-console@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-migration@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-novncproxy@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-scheduler@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-serialproxy@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-spicehtml5proxy@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-nova@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common-container-base@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common-containers@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common-devtools@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tripleo-common@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"product": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"product_id": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-haproxy@4.1.1-2.20250728141134.df96ffc.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"product": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"product_id": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-git@0.5.0-2.20250728140843.4e4498e.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_id": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-keystone@16.0.3-2.20260616134936.9d699a7.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product": {
"name": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_id": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-keystone@16.0.3-2.20260616134936.9d699a7.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-account@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-container@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-object@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-proxy@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-swift@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"product": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"product_id": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-inifile@3.1.1-2.20250728133040.91efced.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"product": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"product_id": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-module-data@0.5.1-2.20250728142646.28dafce.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"product": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"product_id": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-apache@5.1.1-2.20250728133931.1fa9b1c.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"product": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"product_id": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-java@5.0.2-2.20250804144904.e57cbc8.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"product": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"product_id": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-corosync@6.0.2-2.20250728134759.961add3.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"product": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"product_id": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-datacat@0.6.3-2.20250728140400.5cce8f2.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"product": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"product_id": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@11.6.1-2.20251125134914.9adcac6.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tempest@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tempest-all@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tempest@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tempest-tests@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"product": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"product_id": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-firewall@3.4.1-2.20250728144450.94f707c.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"product": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"product_id": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-concat@6.1.1-2.20250728133127.9baa8fc.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"product": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"product_id": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-ipaclient@2.5.2-2.20250728141812.b086731.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"product": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"product_id": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-keepalived@0.0.2-2.20250728142002.bbca37a.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"product": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"product_id": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-stdlib@6.1.1-2.20250728131928.5aa891c.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"product": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"product_id": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-rabbitmq@10.1.2-2.20250728144344.8b9b006.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"product": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"product_id": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-remote@10.0.0-2.20250728135533.7420908.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"product": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"product_id": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-staging@1.0.5-2.20250728134218.b466d93.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"product": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"product_id": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-snmp@3.9.1-2.20250728142735.5d73485.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"product": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"product_id": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-vcsrepo@3.0.1-2.20250728140014.b06d5d3.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"product": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"product_id": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-tomcat@3.1.1-2.20250804144904.a3f92d1.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"product": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"product_id": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-xinetd@3.3.1-2.20250728135145.d768da2.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"product": {
"name": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"product_id": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-collectd-gnocchi@1.7.2-2.20250728143604.de115a7.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"product": {
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"product_id": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-gnocchiclient@7.0.4-2.20250728131928.64814b9.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"product": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"product_id": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-messaging@10.2.4-2.20260710155333.82281a0.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"product": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"product_id": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tripleo-ansible@0.8.1-2.20260112154909.123ce73.el8ost?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le"
},
"product_reference": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src"
},
"product_reference": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64"
},
"product_reference": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le"
},
"product_reference": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64"
},
"product_reference": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-0:23.3.4.18-2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src"
},
"product_reference": "erlang-0:23.3.4.18-2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.3.23-22.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le"
},
"product_reference": "etcd-0:3.3.23-22.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.3.23-22.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src"
},
"product_reference": "etcd-0:3.3.23-22.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.3.23-22.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64"
},
"product_reference": "etcd-0:3.3.23-22.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le"
},
"product_reference": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64"
},
"product_reference": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le"
},
"product_reference": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
},
"product_reference": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
},
"product_reference": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src"
},
"product_reference": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
},
"product_reference": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src"
},
"product_reference": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src"
},
"product_reference": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src"
},
"product_reference": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src"
},
"product_reference": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src"
},
"product_reference": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch"
},
"product_reference": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src"
},
"product_reference": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src"
},
"product_reference": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src"
},
"product_reference": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src"
},
"product_reference": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src"
},
"product_reference": "python-pyasn1-0:0.4.6-4.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch"
},
"product_reference": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
},
"product_reference": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
},
"product_reference": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
},
"product_reference": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
},
"product_reference": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch"
},
"product_reference": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src"
},
"product_reference": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src"
},
"product_reference": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src"
},
"product_reference": "python-pyasn1-0:0.4.6-4.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
},
"product_reference": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src"
},
"product_reference": "python-pyasn1-0:0.4.6-4.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src"
},
"product_reference": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src"
},
"product_reference": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
},
"product_reference": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
},
"product_reference": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-65073",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2025-11-17T08:00:54.372992+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2415344"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack\u0027s Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS (Amazon Web Services) signature to the /v3/ec2tokens or /v3/s3tokens API (Application Programming Interface) endpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability allows an attacker to obtain a valid OpenStack\u0027s Keystone token belonging to a valid user by sending a valid AWS signature to the /v3/ec2tokens or /v3/s3tokens API\u0027s endpoints, leading to access to unauthorized resources or privilege escalation within the OpenStack instance.\n\nThis attack is considered to have a high complexity (AC:H) due to the fact of obtaining such valid AWS token is not straight forward. To be considered vulnerable, the OpenStack deployments should expose the related API end points through a public API or external access.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-65073"
},
{
"category": "external",
"summary": "RHBZ#2415344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415344"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-65073",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-65073"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-65073",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-65073"
},
{
"category": "external",
"summary": "https://security.openstack.org/ossa/OSSA-2025-002.html",
"url": "https://security.openstack.org/ossa/OSSA-2025-002.html"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2025/11/04/2",
"url": "https://www.openwall.com/lists/oss-security/2025/11/04/2"
}
],
"release_date": "2025-11-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"acknowledgments": [
{
"names": [
"Dan Smith"
],
"organization": "RedHat"
}
],
"cve": "CVE-2026-24708",
"cwe": {
"id": "CWE-73",
"name": "External Control of File Name or Path"
},
"discovery_date": "2026-01-16T06:29:23.249000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430312"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in OpenStack Nova\u2019s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw disk and trigger destructive behavior during instance operations such as resize.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat OpenStack Platform. An authenticated attacker can exploit unconstrained disk format handling in OpenStack Nova when invoking qemu-img. By crafting a QCOW2 header on an ephemeral or root disk, an attacker can cause qemu-img to overwrite arbitrary files on the compute host with Nova\u0027s write access, leading to data destruction or denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24708"
},
{
"category": "external",
"summary": "RHBZ#2430312",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430312"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24708",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24708"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24708",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24708"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/nova/+bug/2137507",
"url": "https://bugs.launchpad.net/nova/+bug/2137507"
}
],
"release_date": "2026-02-17T15:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33413",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"discovery_date": "2026-03-26T14:03:01.896580+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451728"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lease management, and trigger data compaction, leading to permanent data loss and disruption of critical workflows. This vulnerability can result in information disclosure and denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "etcd: etcd: Authorization bypass allows information disclosure and denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in etcd allows unauthorized users to bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients and etcd\u0027s built-in authentication is enabled. This can lead to information disclosure and denial of service. Typical Red Hat OpenShift Container Platform and Kubernetes deployments are not affected, as the Kubernetes API server handles authentication and authorization independently of etcd\u0027s internal mechanisms.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33413"
},
{
"category": "external",
"summary": "RHBZ#2451728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451728"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33413",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33413"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33413",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33413"
},
{
"category": "external",
"summary": "https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg",
"url": "https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg"
}
],
"release_date": "2026-03-26T13:36:10.919000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Restrict network access to etcd server ports to ensure only trusted components can establish connections. Implement strong client identity at the transport layer, such as mTLS, with tightly scoped client certificate distribution. This will limit unauthorized access to etcd functions.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "etcd: etcd: Authorization bypass allows information disclosure and denial of service"
},
{
"acknowledgments": [
{
"names": [
"Maxence Bornecque"
],
"organization": "Orange Cyberdefense CERT Vulnerability Intelligence Watch Team"
}
],
"cve": "CVE-2026-33551",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-03-24T23:40:47.060000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451037"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full set of the parent user\u0027s S3 permissions. This effectively bypasses the role restrictions imposed on the application credential, leading to unauthorized access and privilege escalation. This issue affects deployments that use restricted application credentials in combination with the EC2/S3 compatibility API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33551"
},
{
"category": "external",
"summary": "RHBZ#2451037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451037"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33551",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33551"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33551",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33551"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/04/07/12",
"url": "http://www.openwall.com/lists/oss-security/2026/04/07/12"
},
{
"category": "external",
"summary": "https://security.openstack.org/ossa/OSSA-2026-005.html",
"url": "https://security.openstack.org/ossa/OSSA-2026-005.html"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/04/07/12",
"url": "https://www.openwall.com/lists/oss-security/2026/04/07/12"
}
],
"release_date": "2026-04-07T15:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"acknowledgments": [
{
"names": [
"Hyeongeun_Ji"
],
"organization": "Open the Window"
},
{
"names": [
"Abhishek Kekane"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-34881",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-17T13:36:28.695000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2440368"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Glance. An authenticated user can exploit a Server-Side Request Forgery (SSRF) vulnerability within the web-download import feature. This vulnerability stems from inadequate validation of Uniform Resource Identifiers (URIs), which can be circumvented using HTTP redirects or alternative IP encodings. Successful exploitation allows an attacker to gain unauthorized access to internal network resources and potentially exfiltrate sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw in OpenStack Glance\u0027s web-download import feature allows an authenticated user to perform Server-Side Request Forgery (SSRF). The vulnerability arises from insufficient validation of URIs, which can be bypassed through HTTP redirects or alternative IP encodings. This enables an attacker to access internal network resources and potentially exfiltrate sensitive information within the cloud environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34881"
},
{
"category": "external",
"summary": "RHBZ#2440368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440368"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34881"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/glance/+bug/2138602",
"url": "https://bugs.launchpad.net/glance/+bug/2138602"
}
],
"release_date": "2026-03-25T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42789",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T15:10:36.175135+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482093"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP\u0027s public_key module. This vulnerability (CWE-295), related to improper certificate validation, allows a non-Certificate Authority (CA) certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can exploit this by forging leaf certificates for arbitrary identities. This can lead to compromised server identity verification on the client side and client certificate verification on mutual Transport Layer Security (mTLS) servers, undermining the trust in certificate-based authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability where Erlang OTP\u0027s `public_key` module improperly validates certificate chains. A remote attacker with an existing end-entity certificate from a trusted Certificate Authority can forge new leaf certificates, leading to compromised server or client identity verification in TLS/mTLS connections. This impacts applications within Red Hat OpenStack Platform and Community Projects that utilize the default verifier in the OTP `ssl` application. Because an attacker must be able to create or locate a certificate with specific attributes, Red Hat assesses the impact of this vulnerability as Important.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42789"
},
{
"category": "external",
"summary": "RHBZ#2482093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42789"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-42789.html",
"url": "https://cna.erlef.org/cves/CVE-2026-42789.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db",
"url": "https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd",
"url": "https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-42789",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-42789"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-05-27T12:23:06.355000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation"
},
{
"cve": "CVE-2026-42790",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T17:02:53.354271+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482286"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP public_key. This improper certificate validation vulnerability allows a subordinate Certificate Authority (CA) with restricted DNS nameConstraints to bypass these restrictions. By issuing a leaf certificate that lacks a Subject Alternative Name (SAN) but contains a crafted CommonName (CN), an attacker can trick an Erlang OTP TLS client into accepting it as valid for an out-of-scope hostname. This can lead to hostname spoofing and potential man-in-the-middle attacks, compromising the integrity and confidentiality of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Erlang OTP\u0027s public_key module allows a subordinate Certificate Authority to bypass DNS name constraints during TLS hostname verification. An attacker could exploit this by issuing a specially crafted certificate lacking a Subject Alternative Name but containing a malicious CommonName, enabling hostname spoofing and potential man-in-the-middle attacks against Red Hat products acting as Erlang OTP TLS clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42790"
},
{
"category": "external",
"summary": "RHBZ#2482286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482286"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42790"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-42790.html",
"url": "https://cna.erlef.org/cves/CVE-2026-42790.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759",
"url": "https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a",
"url": "https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457",
"url": "https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-42790",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-42790"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-05-27T15:09:01.860000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Ensure all TLS certificates used in the deployment include Subject Alternative Name (SAN) extensions with the appropriate DNS entries. Certificates relying solely on the CommonName (CN) field for hostname identification are susceptible to this bypass. For Erlang applications, the verify_fun option in the ssl module can be configured to reject peer certificates missing the subjectAltName extension.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing"
},
{
"cve": "CVE-2026-43001",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2026-05-01T09:00:55.408726+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464305"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied project_id for an EC2-type credential was not validated against the project of the authenticating application credential. This allows the attacker to create an EC2 credential targeting a different project. Subsequently, a /v3/ec2tokens exchange would issue a Keystone token scoped to the targeted project, enabling unauthorized cross-project access and lateral movement within the credential owner\u0027s role footprint.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in OpenStack Keystone allows an attacker with an unrestricted application credential to bypass project isolation. By exploiting improper validation during EC2 credential creation, an attacker can gain unauthorized access and move laterally between projects within a Red Hat OpenStack Platform deployment, compromising multi-tenant security. If the roles from the original project the attacker holds a credential are compatible with the roles in the project the attacker is targeting, the attacker can perform the same actions granted permission from the initial project in the targeted project. Depending on the level of privileges the attacker has that means a high impact for confidentiality, availability and integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43001"
},
{
"category": "external",
"summary": "RHBZ#2464305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464305"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43001"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43001",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43001"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/keystone/+bug/2149775",
"url": "https://bugs.launchpad.net/keystone/+bug/2149775"
},
{
"category": "external",
"summary": "https://review.opendev.org/c/openstack/keystone/+/985804",
"url": "https://review.opendev.org/c/openstack/keystone/+/985804"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To reduce exposure, ensure that OpenStack application credentials are created with the most restrictive scope possible, limiting their permissions to only what is essential for their intended function. If EC2 credentials are not actively used within your OpenStack deployment, consider disabling the EC2 credential API endpoint in Keystone to prevent unauthorized creation of cross-project EC2 credentials. Refer to the OpenStack Keystone administration guide for detailed instructions on managing application credential scopes and disabling API endpoints. Any changes to Keystone configuration may require a service restart to take effect.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation"
},
{
"cve": "CVE-2026-44393",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-04T16:01:33.285581+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484835"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS (Transport Layer Security) connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonate the RabbitMQ broker. This allows the attacker to perform a man-in-the-middle attack, potentially leading to the disclosure or manipulation of sensitive RPC (Remote Procedure Call) and notification traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in OpenStack oslo.messaging impacts Red Hat OpenStack Platform and OpenShift Container Platform when using RabbitMQ with TLS. The vulnerability arises from the RabbitMQ driver\u0027s failure to perform proper hostname verification during TLS connection establishment. This oversight enables an attacker capable of intercepting control-plane network traffic to impersonate the RabbitMQ broker, potentially leading to man-in-the-middle attacks that compromise the confidentiality and integrity of sensitive RPC and notification data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44393"
},
{
"category": "external",
"summary": "RHBZ#2484835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484835"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44393",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44393"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44393",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44393"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/oslo.messaging/+bug/2150316",
"url": "https://bugs.launchpad.net/oslo.messaging/+bug/2150316"
},
{
"category": "external",
"summary": "https://wiki.openstack.org/wiki/OSSN/OSSN-0096",
"url": "https://wiki.openstack.org/wiki/OSSN/OSSN-0096"
}
],
"release_date": "2026-06-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To mitigate the risk of man-in-the-middle attacks, restrict network access to the RabbitMQ message broker. Configure firewall rules to permit inbound connections to the RabbitMQ port (typically 5672 or 5671 for AMQPS) only from authorized hosts and services within the control plane. This operational measure reduces the exposure to attackers attempting to intercept and impersonate the broker.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification"
}
]
}
RHSA-2026:56143
Vulnerability from csaf_redhat - Published: 2026-08-18 12:17 - Updated: 2026-08-28 08:15Summary
Red Hat Security Advisory: grafana-pcp security update
Severity
Important
Notes
Topic: An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.
Security Fix(es):
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.\n\nSecurity Fix(es):\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:56143",
"url": "https://access.redhat.com/errata/RHSA-2026:56143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56143.json"
}
],
"title": "Red Hat Security Advisory: grafana-pcp security update",
"tracking": {
"current_release_date": "2026-08-28T08:15:03+00:00",
"generator": {
"date": "2026-08-28T08:15:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:56143",
"initial_release_date": "2026-08-18T12:17:45+00:00",
"revision_history": [
{
"date": "2026-08-18T12:17:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-18T12:17:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-28T08:15:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.3.0-1.el10_0.src",
"product": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.src",
"product_id": "grafana-pcp-0:5.3.0-1.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.3.0-1.el10_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"product": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"product_id": "grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.3.0-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"product": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"product_id": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.3.0-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"product": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"product_id": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.3.0-1.el10_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"product": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"product_id": "grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.3.0-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"product": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"product_id": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.3.0-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"product": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"product_id": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.3.0-1.el10_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.3.0-1.el10_0.s390x",
"product": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.s390x",
"product_id": "grafana-pcp-0:5.3.0-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.3.0-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"product": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"product_id": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.3.0-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"product": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"product_id": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.3.0-1.el10_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"product": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"product_id": "grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.3.0-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64",
"product": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64",
"product_id": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.3.0-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"product": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"product_id": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.3.0-1.el10_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64"
},
"product_reference": "grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le"
},
"product_reference": "grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x"
},
"product_reference": "grafana-pcp-0:5.3.0-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src"
},
"product_reference": "grafana-pcp-0:5.3.0-1.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64"
},
"product_reference": "grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64"
},
"product_reference": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le"
},
"product_reference": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x"
},
"product_reference": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64"
},
"product_reference": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64"
},
"product_reference": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le"
},
"product_reference": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x"
},
"product_reference": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
},
"product_reference": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-18T12:17:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56143"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-18T12:17:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56143"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-18T12:17:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56143"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…