{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.16.56 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container\nPlatform 4.16.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container\nPlatform 4.16.56. See the following advisory for the RPM packages for this\nrelease:\n\nhttps://access.redhat.com/errata/RHBA-2026:0984\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nSecurity Fix(es):\n\n* libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend\n(CVE-2025-5987)\n* libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in\nlibexslt/dynamic.c (CVE-2025-9714)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:0985",
        "url": "https://access.redhat.com/errata/RHSA-2026:0985"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2376219",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376219"
      },
      {
        "category": "external",
        "summary": "2392605",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392605"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0985.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.16.56 bug fix and security update",
    "tracking": {
      "current_release_date": "2026-05-11T14:30:21+00:00",
      "generator": {
        "date": "2026-05-11T14:30:21+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.9"
        }
      },
      "id": "RHSA-2026:0985",
      "initial_release_date": "2026-01-30T13:58:09+00:00",
      "revision_history": [
        {
          "date": "2026-01-30T13:58:09+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-01-30T13:58:09+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-11T14:30:21+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.16",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.16",
                  "product_id": "9Base-RHOSE-4.16",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.16::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-aarch64-416.94.202601160124-0",
                "product": {
                  "name": "rhcos-aarch64-416.94.202601160124-0",
                  "product_id": "rhcos-aarch64-416.94.202601160124-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@416.94.202601160124?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-ppc64le-416.94.202601160124-0",
                "product": {
                  "name": "rhcos-ppc64le-416.94.202601160124-0",
                  "product_id": "rhcos-ppc64le-416.94.202601160124-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@416.94.202601160124?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-s390x-416.94.202601160124-0",
                "product": {
                  "name": "rhcos-s390x-416.94.202601160124-0",
                  "product_id": "rhcos-s390x-416.94.202601160124-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@416.94.202601160124?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-x86_64-416.94.202601160124-0",
                "product": {
                  "name": "rhcos-x86_64-416.94.202601160124-0",
                  "product_id": "rhcos-x86_64-416.94.202601160124-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@416.94.202601160124?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-aarch64-416.94.202601160124-0 as a component of Red Hat OpenShift Container Platform 4.16",
          "product_id": "9Base-RHOSE-4.16:rhcos-aarch64-416.94.202601160124-0"
        },
        "product_reference": "rhcos-aarch64-416.94.202601160124-0",
        "relates_to_product_reference": "9Base-RHOSE-4.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-ppc64le-416.94.202601160124-0 as a component of Red Hat OpenShift Container Platform 4.16",
          "product_id": "9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202601160124-0"
        },
        "product_reference": "rhcos-ppc64le-416.94.202601160124-0",
        "relates_to_product_reference": "9Base-RHOSE-4.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-s390x-416.94.202601160124-0 as a component of Red Hat OpenShift Container Platform 4.16",
          "product_id": "9Base-RHOSE-4.16:rhcos-s390x-416.94.202601160124-0"
        },
        "product_reference": "rhcos-s390x-416.94.202601160124-0",
        "relates_to_product_reference": "9Base-RHOSE-4.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-416.94.202601160124-0 as a component of Red Hat OpenShift Container Platform 4.16",
          "product_id": "9Base-RHOSE-4.16:rhcos-x86_64-416.94.202601160124-0"
        },
        "product_reference": "rhcos-x86_64-416.94.202601160124-0",
        "relates_to_product_reference": "9Base-RHOSE-4.16"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5987",
      "cwe": {
        "id": "CWE-393",
        "name": "Return of Wrong Status Code"
      },
      "discovery_date": "2025-07-03T21:55:26.394000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376219"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidentiality and integrity or crashes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security Team has rated this vulnerability as having a Moderate security impact. This is due to the high complexity in exploiting this flaw. For a successful attack to take place an attacker needs to manage to exhaust the heap space to for the OpenSSL library to return the error code which wrongly match the SSH_OK return code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.16:rhcos-aarch64-416.94.202601160124-0",
          "9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202601160124-0",
          "9Base-RHOSE-4.16:rhcos-s390x-416.94.202601160124-0",
          "9Base-RHOSE-4.16:rhcos-x86_64-416.94.202601160124-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376219",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376219"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5987",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5987",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/security/advisories/CVE-2025-5987.txt",
          "url": "https://www.libssh.org/security/advisories/CVE-2025-5987.txt"
        }
      ],
      "release_date": "2025-04-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-30T13:58:09+00:00",
          "details": "For OpenShift Container Platform 4.16 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:c2684677867b7aa2270ae03d6b7a0f0a61e5b97d8567a986210f2b2971115d0d\n\n      (For s390x architecture)\n      The image digest is sha256:ca335903e10d59e71bf4f036702a4ffd93861915d7eb7c4f75973c9a4795cfd5\n\n      (For ppc64le architecture)\n      The image digest is sha256:adac35f7896b1f1dc9fa32fc080d05462695c7012a82cc2faf89d68dd9de3518\n\n      (For aarch64 architecture)\n      The image digest is sha256:4986b8a4f29546033253ea396ebcf34207eba4eb4225558accbf304945168434\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.16:rhcos-aarch64-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-s390x-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-x86_64-416.94.202601160124-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0985"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.16:rhcos-aarch64-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-s390x-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-x86_64-416.94.202601160124-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend"
    },
    {
      "cve": "CVE-2025-9714",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2025-09-02T13:03:56.452000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2392605"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libxstl/libxml2. The \u0027exsltDynMapFunction\u0027 function in libexslt/dynamic.c does not contain a recursion depth check, which may cause an infinite loop via a specially crafted XSLT document while handling \u0027dyn:map()\u0027, leading to stack exhaustion and a local denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "No evidence was found for arbitrary memory corruption through this flaw, limiting its impact to Availability only, and reducing its severity to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.16:rhcos-aarch64-416.94.202601160124-0",
          "9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202601160124-0",
          "9Base-RHOSE-4.16:rhcos-s390x-416.94.202601160124-0",
          "9Base-RHOSE-4.16:rhcos-x86_64-416.94.202601160124-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "RHBZ#2392605",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392605"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-9714",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-9714",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148",
          "url": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148"
        }
      ],
      "release_date": "2025-09-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-30T13:58:09+00:00",
          "details": "For OpenShift Container Platform 4.16 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:c2684677867b7aa2270ae03d6b7a0f0a61e5b97d8567a986210f2b2971115d0d\n\n      (For s390x architecture)\n      The image digest is sha256:ca335903e10d59e71bf4f036702a4ffd93861915d7eb7c4f75973c9a4795cfd5\n\n      (For ppc64le architecture)\n      The image digest is sha256:adac35f7896b1f1dc9fa32fc080d05462695c7012a82cc2faf89d68dd9de3518\n\n      (For aarch64 architecture)\n      The image digest is sha256:4986b8a4f29546033253ea396ebcf34207eba4eb4225558accbf304945168434\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.16:rhcos-aarch64-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-s390x-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-x86_64-416.94.202601160124-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0985"
        },
        {
          "category": "workaround",
          "details": "The impact of this flaw may be reduced by setting strict resource limits to the stack size of processes at the operational system level. This can be achieved either through the \u0027ulimit\u0027 shell built-in or the \u0027limits.conf\u0027 file.",
          "product_ids": [
            "9Base-RHOSE-4.16:rhcos-aarch64-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-s390x-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-x86_64-416.94.202601160124-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.16:rhcos-aarch64-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-s390x-416.94.202601160124-0",
            "9Base-RHOSE-4.16:rhcos-x86_64-416.94.202601160124-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.14.61 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.14.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.14.61. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHSA-2026:0995\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nSecurity Fix(es):\n\n* bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)\n* bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)\n* bind: Cache poisoning due to weak PRNG (CVE-2025-40780)\n* expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)\n* libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend (CVE-2025-5987)\n* libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:0996",
        "url": "https://access.redhat.com/errata/RHSA-2026:0996"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2376219",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376219"
      },
      {
        "category": "external",
        "summary": "2392605",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392605"
      },
      {
        "category": "external",
        "summary": "2395108",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108"
      },
      {
        "category": "external",
        "summary": "2405827",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405827"
      },
      {
        "category": "external",
        "summary": "2405829",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405829"
      },
      {
        "category": "external",
        "summary": "2405830",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405830"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0996.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.14.61 bug fix and security update",
    "tracking": {
      "current_release_date": "2026-05-27T07:48:35+00:00",
      "generator": {
        "date": "2026-05-27T07:48:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:0996",
      "initial_release_date": "2026-01-30T14:21:04+00:00",
      "revision_history": [
        {
          "date": "2026-01-30T14:21:04+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-01-30T14:21:04+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-27T07:48:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.14",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.14",
                  "product_id": "9Base-RHOSE-4.14",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.14::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-aarch64-414.92.202601191325-0",
                "product": {
                  "name": "rhcos-aarch64-414.92.202601191325-0",
                  "product_id": "rhcos-aarch64-414.92.202601191325-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@414.92.202601191325?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-ppc64le-414.92.202601191325-0",
                "product": {
                  "name": "rhcos-ppc64le-414.92.202601191325-0",
                  "product_id": "rhcos-ppc64le-414.92.202601191325-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@414.92.202601191325?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-s390x-414.92.202601191325-0",
                "product": {
                  "name": "rhcos-s390x-414.92.202601191325-0",
                  "product_id": "rhcos-s390x-414.92.202601191325-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@414.92.202601191325?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-x86_64-414.92.202601191325-0",
                "product": {
                  "name": "rhcos-x86_64-414.92.202601191325-0",
                  "product_id": "rhcos-x86_64-414.92.202601191325-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@414.92.202601191325?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-aarch64-414.92.202601191325-0 as a component of Red Hat OpenShift Container Platform 4.14",
          "product_id": "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0"
        },
        "product_reference": "rhcos-aarch64-414.92.202601191325-0",
        "relates_to_product_reference": "9Base-RHOSE-4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-ppc64le-414.92.202601191325-0 as a component of Red Hat OpenShift Container Platform 4.14",
          "product_id": "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0"
        },
        "product_reference": "rhcos-ppc64le-414.92.202601191325-0",
        "relates_to_product_reference": "9Base-RHOSE-4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-s390x-414.92.202601191325-0 as a component of Red Hat OpenShift Container Platform 4.14",
          "product_id": "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0"
        },
        "product_reference": "rhcos-s390x-414.92.202601191325-0",
        "relates_to_product_reference": "9Base-RHOSE-4.14"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-414.92.202601191325-0 as a component of Red Hat OpenShift Container Platform 4.14",
          "product_id": "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
        },
        "product_reference": "rhcos-x86_64-414.92.202601191325-0",
        "relates_to_product_reference": "9Base-RHOSE-4.14"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5987",
      "cwe": {
        "id": "CWE-393",
        "name": "Return of Wrong Status Code"
      },
      "discovery_date": "2025-07-03T21:55:26.394000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376219"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidentiality and integrity or crashes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security Team has rated this vulnerability as having a Moderate security impact. This is due to the high complexity in exploiting this flaw. For a successful attack to take place an attacker needs to manage to exhaust the heap space to for the OpenSSL library to return the error code which wrongly match the SSH_OK return code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376219",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376219"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5987",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5987",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/security/advisories/CVE-2025-5987.txt",
          "url": "https://www.libssh.org/security/advisories/CVE-2025-5987.txt"
        }
      ],
      "release_date": "2025-04-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-30T14:21:04+00:00",
          "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:9e91245847127c920394c66c06a2c5485a1e5e54c8254326f18c04fee139fb43\n\n      (For s390x architecture)\n      The image digest is sha256:cf49729558f112fb860b847d6a036b5545ecbf3d7ecce1107081251373be848e\n\n      (For ppc64le architecture)\n      The image digest is sha256:4bf0c14c8511361620a3d6c098f087ae6f4be7b4972314cadbabb3945f43b517\n\n      (For aarch64 architecture)\n      The image digest is sha256:279e8a5c8c3954f85de55780ac18e84cc21e052836131e921f1305094b1b4029\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0996"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend"
    },
    {
      "cve": "CVE-2025-8677",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2025-10-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2405830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in BIND 9 resolvers, where processing malformed DNSKEY records from a specially crafted zone can lead to resource exhaustion, primarily causing excessive CPU utilization. This issue enables a remote, unauthenticated attacker to degrade resolver performance and potentially cause a denial of service (DoS) for legitimate DNS clients.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: Resource exhaustion via malformed DNSKEY handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is considered Important because it allows a remote, unauthenticated attacker to cause significant CPU exhaustion on vulnerable BIND resolvers by serving zones containing malformed DNSKEY records. The flaw triggers excessive computational effort during DNSKEY validation, leading to degraded performance and potential denial of service for legitimate clients. However, the issue affects availability only\u2014it does not enable code execution, data exposure, or privilege escalation\u2014so it is not classified as critical. Furthermore, authoritative servers are not impacted, limiting the scope of exposure to recursive resolvers. While the attack is easy to launch and can disrupt DNS operations, its effect ceases once the malicious traffic stops, making prompt patching and recursive access control effective mitigations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-8677"
        },
        {
          "category": "external",
          "summary": "RHBZ#2405830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-8677",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-8677"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-8677",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8677"
        }
      ],
      "release_date": "2025-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-30T14:21:04+00:00",
          "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:9e91245847127c920394c66c06a2c5485a1e5e54c8254326f18c04fee139fb43\n\n      (For s390x architecture)\n      The image digest is sha256:cf49729558f112fb860b847d6a036b5545ecbf3d7ecce1107081251373be848e\n\n      (For ppc64le architecture)\n      The image digest is sha256:4bf0c14c8511361620a3d6c098f087ae6f4be7b4972314cadbabb3945f43b517\n\n      (For aarch64 architecture)\n      The image digest is sha256:279e8a5c8c3954f85de55780ac18e84cc21e052836131e921f1305094b1b4029\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0996"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduce risk, restrict recursive queries to trusted or internal networks only, and apply rate limiting or firewall rules to prevent excessive or repetitive requests. Enabling DNSSEC validation helps reject forged records, while isolating recursive resolvers from authoritative servers limits the impact of potential cache poisoning. Active monitoring of CPU usage, query volume, and cache anomalies can provide early warning of abuse or attacks.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: Resource exhaustion via malformed DNSKEY handling"
    },
    {
      "cve": "CVE-2025-9714",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2025-09-02T13:03:56.452000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2392605"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libxstl/libxml2. The \u0027exsltDynMapFunction\u0027 function in libexslt/dynamic.c does not contain a recursion depth check, which may cause an infinite loop via a specially crafted XSLT document while handling \u0027dyn:map()\u0027, leading to stack exhaustion and a local denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "No evidence was found for arbitrary memory corruption through this flaw, limiting its impact to Availability only, and reducing its severity to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "RHBZ#2392605",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392605"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-9714",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-9714",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148",
          "url": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148"
        }
      ],
      "release_date": "2025-09-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-30T14:21:04+00:00",
          "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:9e91245847127c920394c66c06a2c5485a1e5e54c8254326f18c04fee139fb43\n\n      (For s390x architecture)\n      The image digest is sha256:cf49729558f112fb860b847d6a036b5545ecbf3d7ecce1107081251373be848e\n\n      (For ppc64le architecture)\n      The image digest is sha256:4bf0c14c8511361620a3d6c098f087ae6f4be7b4972314cadbabb3945f43b517\n\n      (For aarch64 architecture)\n      The image digest is sha256:279e8a5c8c3954f85de55780ac18e84cc21e052836131e921f1305094b1b4029\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0996"
        },
        {
          "category": "workaround",
          "details": "The impact of this flaw may be reduced by setting strict resource limits to the stack size of processes at the operational system level. This can be achieved either through the \u0027ulimit\u0027 shell built-in or the \u0027limits.conf\u0027 file.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c"
    },
    {
      "cve": "CVE-2025-40778",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2025-10-22T15:07:23.729000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2405827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability exists in BIND\u2019s DNS resolver logic that makes it overly permissive when accepting resource records (RRs) in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache, redirecting clients to malicious domains or unauthorized servers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: Cache poisoning attacks with unsolicited RRs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "It is classified as Important rather than Critical because its impact is limited to cache poisoning within recursive resolvers and does not allow direct code execution, privilege escalation, or service disruption. The vulnerability affects the accuracy of DNS responses, but not the availability or confidentiality of systems. Additionally, DNSSEC-enabled deployments and restricted recursive access can significantly mitigate exploitation risks. Therefore, while the flaw can misdirect network traffic and compromise trust in name resolution, it does not directly compromise the underlying server or client systems, justifying an Important \u2014 but not Critical \u2014 severity rating.\n\nTechnical Analysis:\nThe issue arises because BIND fails to strictly validate unsolicited resource records accompanying legitimate DNS responses. This gap allows forged recursive resolvers to be cached as valid entries. Since the attack is remote, requires no authentication, and exploits a low-complexity vector, it is highly impactful in recursive resolver environments\u2014especially those exposed to untrusted clients or open resolvers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-40778"
        },
        {
          "category": "external",
          "summary": "RHBZ#2405827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-40778",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-40778"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-40778",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40778"
        }
      ],
      "release_date": "2025-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-30T14:21:04+00:00",
          "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:9e91245847127c920394c66c06a2c5485a1e5e54c8254326f18c04fee139fb43\n\n      (For s390x architecture)\n      The image digest is sha256:cf49729558f112fb860b847d6a036b5545ecbf3d7ecce1107081251373be848e\n\n      (For ppc64le architecture)\n      The image digest is sha256:4bf0c14c8511361620a3d6c098f087ae6f4be7b4972314cadbabb3945f43b517\n\n      (For aarch64 architecture)\n      The image digest is sha256:279e8a5c8c3954f85de55780ac18e84cc21e052836131e921f1305094b1b4029\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0996"
        },
        {
          "category": "workaround",
          "details": "While it is not possible to eliminate risk from this vulnerability, there are several options for reducing the risk. These include restricting recursive queries to trusted or internal networks only, and apply rate limiting or firewall rules to prevent excessive or repetitive requests. Enabling DNSSEC validation helps reject forged records, while isolating recursive resolvers from authoritative servers limits the impact of potential cache poisoning. Active monitoring of CPU usage, query volume, and cache anomalies can provide early warning of abuse or attacks.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: Cache poisoning attacks with unsolicited RRs"
    },
    {
      "cve": "CVE-2025-40780",
      "cwe": {
        "id": "CWE-338",
        "name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"
      },
      "discovery_date": "2025-10-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2405829"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator (PRNG). This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS responses into the resolver\u2019s cache, causing clients to receive spoofed DNS data. Authoritative servers are generally unaffected, but recursive resolvers are exposed to this risk. Exploitation is remote and does not require user interaction.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: Cache poisoning due to weak PRNG",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in BIND 9 resolvers caused by a weakness in the Pseudo Random Number Generator (PRNG) used to select the UDP source port and DNS query (transaction) ID. Exploitation requires an attacker to correctly predict both values and race the legitimate authoritative response with a spoofed packet to perform cache poisoning. While the PRNG weakness reduces entropy and makes prediction feasible under certain conditions, this still requires precise timing, on-path or spoofing capabilities, and targeting of recursive resolvers.\n\nThe impact is limited to resolver cache integrity; it does not allow remote code execution, privilege escalation, or direct compromise of the BIND server itself. Authoritative servers are not affected. Additionally, operational mitigations such as DNSSEC validation, access control restricting recursion, and network-level packet filtering reduce real-world exploitability. No active exploits have been observed in the wild.\n\nBecause exploitation is non-trivial, requires network-level spoofing and precise timing, and only affects cache integrity without server compromise, the vulnerability is considered Important rather than Critical.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-40780"
        },
        {
          "category": "external",
          "summary": "RHBZ#2405829",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405829"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-40780",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-40780"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-40780",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40780"
        }
      ],
      "release_date": "2025-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-30T14:21:04+00:00",
          "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:9e91245847127c920394c66c06a2c5485a1e5e54c8254326f18c04fee139fb43\n\n      (For s390x architecture)\n      The image digest is sha256:cf49729558f112fb860b847d6a036b5545ecbf3d7ecce1107081251373be848e\n\n      (For ppc64le architecture)\n      The image digest is sha256:4bf0c14c8511361620a3d6c098f087ae6f4be7b4972314cadbabb3945f43b517\n\n      (For aarch64 architecture)\n      The image digest is sha256:279e8a5c8c3954f85de55780ac18e84cc21e052836131e921f1305094b1b4029\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0996"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduce risk, restrict recursive queries to trusted or internal networks only, and apply rate limiting or firewall rules to prevent excessive or repetitive requests. Enabling DNSSEC validation helps reject forged records, while isolating recursive resolvers from authoritative servers limits the impact of potential cache poisoning. Active monitoring of CPU usage, query volume, and cache anomalies can provide early warning of abuse or attacks.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: Cache poisoning due to weak PRNG"
    },
    {
      "cve": "CVE-2025-59375",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-09-15T03:00:59.775098+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2395108"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A memory amplification vulnerability in libexpat allows attackers to trigger excessive dynamic memory allocations by submitting specially crafted XML input. A small input (~250 KiB) can cause the parser to allocate hundreds of megabytes, leading to denial-of-service (DoS) through memory exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is Important rather than Critical because, while it allows for significant resource exhaustion leading to denial-of-service (DoS), it does not enable arbitrary code execution, data leakage, or privilege escalation. The vulnerability stems from an uncontrolled memory amplification behavior in libexpat\u2019s parser, where a relatively small XML payload can cause disproportionately large heap allocations. However, the flaw is limited in scope to service disruption and requires the attacker to submit a crafted XML document\u2014something that can be mitigated with proper input validation and memory usage limits. Therefore, while the exploitability is high, the impact is confined to availability, not confidentiality or integrity, making it a high-severity but not critical flaw.\n\nIn Firefox and Thunderbird, where libexpat is a transitive userspace dependency, exploitation usually just crashes the application (app-level DoS), so it is classified as Moderate instead of Important.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
          "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-59375"
        },
        {
          "category": "external",
          "summary": "RHBZ#2395108",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-59375",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-59375"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-59375",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59375"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2025-59375",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2025-59375"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2025-59375",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2025-59375"
        }
      ],
      "release_date": "2025-09-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-30T14:21:04+00:00",
          "details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:9e91245847127c920394c66c06a2c5485a1e5e54c8254326f18c04fee139fb43\n\n      (For s390x architecture)\n      The image digest is sha256:cf49729558f112fb860b847d6a036b5545ecbf3d7ecce1107081251373be848e\n\n      (For ppc64le architecture)\n      The image digest is sha256:4bf0c14c8511361620a3d6c098f087ae6f4be7b4972314cadbabb3945f43b517\n\n      (For aarch64 architecture)\n      The image digest is sha256:279e8a5c8c3954f85de55780ac18e84cc21e052836131e921f1305094b1b4029\n\nAll OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0996"
        },
        {
          "category": "workaround",
          "details": "To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption.",
          "product_ids": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.14:rhcos-aarch64-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-ppc64le-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-s390x-414.92.202601191325-0",
            "9Base-RHOSE-4.14:rhcos-x86_64-414.92.202601191325-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.19.23 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.19.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.19.23. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:1538\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nSecurity Fix(es):\n\n* libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend (CVE-2025-5987)\n* libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714)\n* binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:1539",
        "url": "https://access.redhat.com/errata/RHSA-2026:1539"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2376219",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376219"
      },
      {
        "category": "external",
        "summary": "2392605",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392605"
      },
      {
        "category": "external",
        "summary": "2399948",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2399948"
      },
      {
        "category": "external",
        "summary": "OCPBUGS-66358",
        "url": "https://issues.redhat.com/browse/OCPBUGS-66358"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1539.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.19.23 bug fix and security update",
    "tracking": {
      "current_release_date": "2026-05-11T14:30:23+00:00",
      "generator": {
        "date": "2026-05-11T14:30:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.9"
        }
      },
      "id": "RHSA-2026:1539",
      "initial_release_date": "2026-02-04T18:43:37+00:00",
      "revision_history": [
        {
          "date": "2026-02-04T18:43:37+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-02-04T18:43:37+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-11T14:30:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.19",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.19",
                  "product_id": "9Base-RHOSE-4.19",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.19::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-aarch64-9.6.20260123-0",
                "product": {
                  "name": "rhcos-aarch64-9.6.20260123-0",
                  "product_id": "rhcos-aarch64-9.6.20260123-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@9.6.20260123?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhcos-aarch64-4.19.9.6.202601260820-0",
                "product": {
                  "name": "rhcos-aarch64-4.19.9.6.202601260820-0",
                  "product_id": "rhcos-aarch64-4.19.9.6.202601260820-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.19.9.6.202601260820?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-ppc64le-4.19.9.6.202601260820-0",
                "product": {
                  "name": "rhcos-ppc64le-4.19.9.6.202601260820-0",
                  "product_id": "rhcos-ppc64le-4.19.9.6.202601260820-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.19.9.6.202601260820?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhcos-ppc64le-9.6.20260123-0",
                "product": {
                  "name": "rhcos-ppc64le-9.6.20260123-0",
                  "product_id": "rhcos-ppc64le-9.6.20260123-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@9.6.20260123?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-s390x-4.19.9.6.202601260820-0",
                "product": {
                  "name": "rhcos-s390x-4.19.9.6.202601260820-0",
                  "product_id": "rhcos-s390x-4.19.9.6.202601260820-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.19.9.6.202601260820?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhcos-s390x-9.6.20260123-0",
                "product": {
                  "name": "rhcos-s390x-9.6.20260123-0",
                  "product_id": "rhcos-s390x-9.6.20260123-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@9.6.20260123?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-x86_64-4.19.9.6.202601260820-0",
                "product": {
                  "name": "rhcos-x86_64-4.19.9.6.202601260820-0",
                  "product_id": "rhcos-x86_64-4.19.9.6.202601260820-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@4.19.9.6.202601260820?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhcos-x86_64-9.6.20260123-0",
                "product": {
                  "name": "rhcos-x86_64-9.6.20260123-0",
                  "product_id": "rhcos-x86_64-9.6.20260123-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@9.6.20260123?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-aarch64-4.19.9.6.202601260820-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0"
        },
        "product_reference": "rhcos-aarch64-4.19.9.6.202601260820-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-aarch64-9.6.20260123-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0"
        },
        "product_reference": "rhcos-aarch64-9.6.20260123-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-ppc64le-4.19.9.6.202601260820-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0"
        },
        "product_reference": "rhcos-ppc64le-4.19.9.6.202601260820-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-ppc64le-9.6.20260123-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0"
        },
        "product_reference": "rhcos-ppc64le-9.6.20260123-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-s390x-4.19.9.6.202601260820-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0"
        },
        "product_reference": "rhcos-s390x-4.19.9.6.202601260820-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-s390x-9.6.20260123-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0"
        },
        "product_reference": "rhcos-s390x-9.6.20260123-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-4.19.9.6.202601260820-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0"
        },
        "product_reference": "rhcos-x86_64-4.19.9.6.202601260820-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-9.6.20260123-0 as a component of Red Hat OpenShift Container Platform 4.19",
          "product_id": "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
        },
        "product_reference": "rhcos-x86_64-9.6.20260123-0",
        "relates_to_product_reference": "9Base-RHOSE-4.19"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5987",
      "cwe": {
        "id": "CWE-393",
        "name": "Return of Wrong Status Code"
      },
      "discovery_date": "2025-07-03T21:55:26.394000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376219"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidentiality and integrity or crashes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security Team has rated this vulnerability as having a Moderate security impact. This is due to the high complexity in exploiting this flaw. For a successful attack to take place an attacker needs to manage to exhaust the heap space to for the OpenSSL library to return the error code which wrongly match the SSH_OK return code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
          "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376219",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376219"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5987",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5987",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/security/advisories/CVE-2025-5987.txt",
          "url": "https://www.libssh.org/security/advisories/CVE-2025-5987.txt"
        }
      ],
      "release_date": "2025-04-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-04T18:43:37+00:00",
          "details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:7bf7c5dabc70518b89130ff7cfe62d14a61ed800adb418359bd9dcaa17b50206\n\n      (For s390x architecture)\n      The image digest is sha256:7b2eb7420e10ac8d5e1e5698393235bcad236172c49e688dff2ee651668caf29\n\n      (For ppc64le architecture)\n      The image digest is sha256:7213776b521925f53a6a2dfac72adb9a6f9df9710dd39c8847bd6ef211aad63c\n\n      (For aarch64 architecture)\n      The image digest is sha256:369335090d5f4f5b4853e22c750ef7749ae18320be610d50f7314bb917e2b617\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1539"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend"
    },
    {
      "cve": "CVE-2025-9714",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2025-09-02T13:03:56.452000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2392605"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libxstl/libxml2. The \u0027exsltDynMapFunction\u0027 function in libexslt/dynamic.c does not contain a recursion depth check, which may cause an infinite loop via a specially crafted XSLT document while handling \u0027dyn:map()\u0027, leading to stack exhaustion and a local denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "No evidence was found for arbitrary memory corruption through this flaw, limiting its impact to Availability only, and reducing its severity to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
          "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "RHBZ#2392605",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392605"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-9714",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-9714",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148",
          "url": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148"
        }
      ],
      "release_date": "2025-09-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-04T18:43:37+00:00",
          "details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:7bf7c5dabc70518b89130ff7cfe62d14a61ed800adb418359bd9dcaa17b50206\n\n      (For s390x architecture)\n      The image digest is sha256:7b2eb7420e10ac8d5e1e5698393235bcad236172c49e688dff2ee651668caf29\n\n      (For ppc64le architecture)\n      The image digest is sha256:7213776b521925f53a6a2dfac72adb9a6f9df9710dd39c8847bd6ef211aad63c\n\n      (For aarch64 architecture)\n      The image digest is sha256:369335090d5f4f5b4853e22c750ef7749ae18320be610d50f7314bb917e2b617\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1539"
        },
        {
          "category": "workaround",
          "details": "The impact of this flaw may be reduced by setting strict resource limits to the stack size of processes at the operational system level. This can be achieved either through the \u0027ulimit\u0027 shell built-in or the \u0027limits.conf\u0027 file.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c"
    },
    {
      "cve": "CVE-2025-11083",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2025-09-28T00:01:07.638629+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2399948"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A head based buffer overflow flaw has been discovered in GNU bin utilities. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "binutils: GNU Binutils Linker heap-based overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this vulnerability as Moderate as a result of how the GNU Binutils are configured to be used in Red Hat products. When running with default configurations the affected program will have limited privileges and thus the impact of this flaw will be restricted.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
          "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
          "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-11083"
        },
        {
          "category": "external",
          "summary": "RHBZ#2399948",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2399948"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-11083",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-11083"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-11083",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11083"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/attachment.cgi?id=16353",
          "url": "https://sourceware.org/bugzilla/attachment.cgi?id=16353"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33457",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33457"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490",
          "url": "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?ctiid.326124",
          "url": "https://vuldb.com/?ctiid.326124"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?id.326124",
          "url": "https://vuldb.com/?id.326124"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?submit.661277",
          "url": "https://vuldb.com/?submit.661277"
        },
        {
          "category": "external",
          "summary": "https://www.gnu.org/",
          "url": "https://www.gnu.org/"
        }
      ],
      "release_date": "2025-09-27T23:02:08.428000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-04T18:43:37+00:00",
          "details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:7bf7c5dabc70518b89130ff7cfe62d14a61ed800adb418359bd9dcaa17b50206\n\n      (For s390x architecture)\n      The image digest is sha256:7b2eb7420e10ac8d5e1e5698393235bcad236172c49e688dff2ee651668caf29\n\n      (For ppc64le architecture)\n      The image digest is sha256:7213776b521925f53a6a2dfac72adb9a6f9df9710dd39c8847bd6ef211aad63c\n\n      (For aarch64 architecture)\n      The image digest is sha256:369335090d5f4f5b4853e22c750ef7749ae18320be610d50f7314bb917e2b617\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1539"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-aarch64-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-ppc64le-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-s390x-9.6.20260123-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202601260820-0",
            "9Base-RHOSE-4.19:rhcos-x86_64-9.6.20260123-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "binutils: GNU Binutils Linker heap-based overflow"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.15.61 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container\nPlatform 4.15.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container\nPlatform 4.15.61. See the following advisory for the RPM packages for this\nrelease:\n\nhttps://access.redhat.com/errata/RHSA-2026:1540\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nSecurity Fix(es):\n\n* libarchive: Double free at archive_read_format_rar_seek_data() in\narchive_read_support_format_rar.c (CVE-2025-5914)\n* bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)\n* bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)\n* bind: Cache poisoning due to weak PRNG (CVE-2025-40780)\n* expat: libexpat in Expat allows attackers to trigger large dynamic memory\nallocations via a small document that is submitted for parsing\n(CVE-2025-59375)\n* libssh: out-of-bounds read in sftp_handle() (CVE-2025-5318)\n* libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend\n(CVE-2025-5987)\n* libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in\nlibexslt/dynamic.c (CVE-2025-9714)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:1541",
        "url": "https://access.redhat.com/errata/RHSA-2026:1541"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2369131",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369131"
      },
      {
        "category": "external",
        "summary": "2370861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
      },
      {
        "category": "external",
        "summary": "2376219",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376219"
      },
      {
        "category": "external",
        "summary": "2392605",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392605"
      },
      {
        "category": "external",
        "summary": "2395108",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108"
      },
      {
        "category": "external",
        "summary": "2405827",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405827"
      },
      {
        "category": "external",
        "summary": "2405829",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405829"
      },
      {
        "category": "external",
        "summary": "2405830",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405830"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1541.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.15.61 bug fix and security update",
    "tracking": {
      "current_release_date": "2026-05-27T07:48:46+00:00",
      "generator": {
        "date": "2026-05-27T07:48:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:1541",
      "initial_release_date": "2026-02-05T16:26:06+00:00",
      "revision_history": [
        {
          "date": "2026-02-05T16:26:06+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-02-05T16:26:06+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-27T07:48:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.15",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.15",
                  "product_id": "9Base-RHOSE-4.15",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.15::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-aarch64-415.92.202601271320-0",
                "product": {
                  "name": "rhcos-aarch64-415.92.202601271320-0",
                  "product_id": "rhcos-aarch64-415.92.202601271320-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@415.92.202601271320?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-ppc64le-415.92.202601271320-0",
                "product": {
                  "name": "rhcos-ppc64le-415.92.202601271320-0",
                  "product_id": "rhcos-ppc64le-415.92.202601271320-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@415.92.202601271320?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-s390x-415.92.202601271320-0",
                "product": {
                  "name": "rhcos-s390x-415.92.202601271320-0",
                  "product_id": "rhcos-s390x-415.92.202601271320-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@415.92.202601271320?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-x86_64-415.92.202601271320-0",
                "product": {
                  "name": "rhcos-x86_64-415.92.202601271320-0",
                  "product_id": "rhcos-x86_64-415.92.202601271320-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@415.92.202601271320?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-aarch64-415.92.202601271320-0 as a component of Red Hat OpenShift Container Platform 4.15",
          "product_id": "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0"
        },
        "product_reference": "rhcos-aarch64-415.92.202601271320-0",
        "relates_to_product_reference": "9Base-RHOSE-4.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-ppc64le-415.92.202601271320-0 as a component of Red Hat OpenShift Container Platform 4.15",
          "product_id": "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0"
        },
        "product_reference": "rhcos-ppc64le-415.92.202601271320-0",
        "relates_to_product_reference": "9Base-RHOSE-4.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-s390x-415.92.202601271320-0 as a component of Red Hat OpenShift Container Platform 4.15",
          "product_id": "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0"
        },
        "product_reference": "rhcos-s390x-415.92.202601271320-0",
        "relates_to_product_reference": "9Base-RHOSE-4.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-415.92.202601271320-0 as a component of Red Hat OpenShift Container Platform 4.15",
          "product_id": "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
        },
        "product_reference": "rhcos-x86_64-415.92.202601271320-0",
        "relates_to_product_reference": "9Base-RHOSE-4.15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Ronald Crane"
          ]
        }
      ],
      "cve": "CVE-2025-5318",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2025-05-29T06:48:59.169000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2369131"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: out-of-bounds read in sftp_handle()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue requires an attacker with valid credentials to access a server, limiting the scope to legitimate users of the SFTP service. Due to this reason, this flaw has been rated with a Moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5318"
        },
        {
          "category": "external",
          "summary": "RHBZ#2369131",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369131"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5318",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5318"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5318",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5318"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/security/advisories/CVE-2025-5318.txt",
          "url": "https://www.libssh.org/security/advisories/CVE-2025-5318.txt"
        }
      ],
      "release_date": "2025-06-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-05T16:26:06+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:d517885ee59d46c2aca8be69fdcf916f78a510ae76a5a9f7875c1c5ab3cfc3c1\n\n      (For s390x architecture)\n      The image digest is sha256:3a4a7c87e8ca5f4e3803f8f203599b25055276a532df8e0b66ec4ec2ebc51f4c\n\n      (For ppc64le architecture)\n      The image digest is sha256:f34818181660a9f58a59e06dbe58f24de82dcbb688e5f940a41e62e08f1edf94\n\n      (For aarch64 architecture)\n      The image digest is sha256:24eeb2ea15ac709ed08df9b6f1a5d1ac334c4f7335c0ae5249e17298ab297517\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1541"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: out-of-bounds read in sftp_handle()"
    },
    {
      "cve": "CVE-2025-5914",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2025-06-06T17:58:25.491000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2370861"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated this vulnerability as Important because it allows a local attacker with limited privileges to trigger a double-free in libarchive\u0027s RAR parser by providing a specially crafted RAR archive. Successful exploitation could result in code execution or application crashes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "RHBZ#2370861",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2370861"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5914",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5914"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/pull/2598",
          "url": "https://github.com/libarchive/libarchive/pull/2598"
        },
        {
          "category": "external",
          "summary": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0",
          "url": "https://github.com/libarchive/libarchive/releases/tag/v3.8.0"
        }
      ],
      "release_date": "2025-05-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-05T16:26:06+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:d517885ee59d46c2aca8be69fdcf916f78a510ae76a5a9f7875c1c5ab3cfc3c1\n\n      (For s390x architecture)\n      The image digest is sha256:3a4a7c87e8ca5f4e3803f8f203599b25055276a532df8e0b66ec4ec2ebc51f4c\n\n      (For ppc64le architecture)\n      The image digest is sha256:f34818181660a9f58a59e06dbe58f24de82dcbb688e5f940a41e62e08f1edf94\n\n      (For aarch64 architecture)\n      The image digest is sha256:24eeb2ea15ac709ed08df9b6f1a5d1ac334c4f7335c0ae5249e17298ab297517\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1541"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c"
    },
    {
      "cve": "CVE-2025-5987",
      "cwe": {
        "id": "CWE-393",
        "name": "Return of Wrong Status Code"
      },
      "discovery_date": "2025-07-03T21:55:26.394000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376219"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidentiality and integrity or crashes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security Team has rated this vulnerability as having a Moderate security impact. This is due to the high complexity in exploiting this flaw. For a successful attack to take place an attacker needs to manage to exhaust the heap space to for the OpenSSL library to return the error code which wrongly match the SSH_OK return code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376219",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376219"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5987",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5987",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/security/advisories/CVE-2025-5987.txt",
          "url": "https://www.libssh.org/security/advisories/CVE-2025-5987.txt"
        }
      ],
      "release_date": "2025-04-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-05T16:26:06+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:d517885ee59d46c2aca8be69fdcf916f78a510ae76a5a9f7875c1c5ab3cfc3c1\n\n      (For s390x architecture)\n      The image digest is sha256:3a4a7c87e8ca5f4e3803f8f203599b25055276a532df8e0b66ec4ec2ebc51f4c\n\n      (For ppc64le architecture)\n      The image digest is sha256:f34818181660a9f58a59e06dbe58f24de82dcbb688e5f940a41e62e08f1edf94\n\n      (For aarch64 architecture)\n      The image digest is sha256:24eeb2ea15ac709ed08df9b6f1a5d1ac334c4f7335c0ae5249e17298ab297517\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1541"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend"
    },
    {
      "cve": "CVE-2025-8677",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2025-10-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2405830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in BIND 9 resolvers, where processing malformed DNSKEY records from a specially crafted zone can lead to resource exhaustion, primarily causing excessive CPU utilization. This issue enables a remote, unauthenticated attacker to degrade resolver performance and potentially cause a denial of service (DoS) for legitimate DNS clients.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: Resource exhaustion via malformed DNSKEY handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is considered Important because it allows a remote, unauthenticated attacker to cause significant CPU exhaustion on vulnerable BIND resolvers by serving zones containing malformed DNSKEY records. The flaw triggers excessive computational effort during DNSKEY validation, leading to degraded performance and potential denial of service for legitimate clients. However, the issue affects availability only\u2014it does not enable code execution, data exposure, or privilege escalation\u2014so it is not classified as critical. Furthermore, authoritative servers are not impacted, limiting the scope of exposure to recursive resolvers. While the attack is easy to launch and can disrupt DNS operations, its effect ceases once the malicious traffic stops, making prompt patching and recursive access control effective mitigations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-8677"
        },
        {
          "category": "external",
          "summary": "RHBZ#2405830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-8677",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-8677"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-8677",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8677"
        }
      ],
      "release_date": "2025-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-05T16:26:06+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:d517885ee59d46c2aca8be69fdcf916f78a510ae76a5a9f7875c1c5ab3cfc3c1\n\n      (For s390x architecture)\n      The image digest is sha256:3a4a7c87e8ca5f4e3803f8f203599b25055276a532df8e0b66ec4ec2ebc51f4c\n\n      (For ppc64le architecture)\n      The image digest is sha256:f34818181660a9f58a59e06dbe58f24de82dcbb688e5f940a41e62e08f1edf94\n\n      (For aarch64 architecture)\n      The image digest is sha256:24eeb2ea15ac709ed08df9b6f1a5d1ac334c4f7335c0ae5249e17298ab297517\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1541"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduce risk, restrict recursive queries to trusted or internal networks only, and apply rate limiting or firewall rules to prevent excessive or repetitive requests. Enabling DNSSEC validation helps reject forged records, while isolating recursive resolvers from authoritative servers limits the impact of potential cache poisoning. Active monitoring of CPU usage, query volume, and cache anomalies can provide early warning of abuse or attacks.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: Resource exhaustion via malformed DNSKEY handling"
    },
    {
      "cve": "CVE-2025-9714",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2025-09-02T13:03:56.452000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2392605"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libxstl/libxml2. The \u0027exsltDynMapFunction\u0027 function in libexslt/dynamic.c does not contain a recursion depth check, which may cause an infinite loop via a specially crafted XSLT document while handling \u0027dyn:map()\u0027, leading to stack exhaustion and a local denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "No evidence was found for arbitrary memory corruption through this flaw, limiting its impact to Availability only, and reducing its severity to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "RHBZ#2392605",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392605"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-9714",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-9714",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9714"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148",
          "url": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/148"
        }
      ],
      "release_date": "2025-09-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-05T16:26:06+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:d517885ee59d46c2aca8be69fdcf916f78a510ae76a5a9f7875c1c5ab3cfc3c1\n\n      (For s390x architecture)\n      The image digest is sha256:3a4a7c87e8ca5f4e3803f8f203599b25055276a532df8e0b66ec4ec2ebc51f4c\n\n      (For ppc64le architecture)\n      The image digest is sha256:f34818181660a9f58a59e06dbe58f24de82dcbb688e5f940a41e62e08f1edf94\n\n      (For aarch64 architecture)\n      The image digest is sha256:24eeb2ea15ac709ed08df9b6f1a5d1ac334c4f7335c0ae5249e17298ab297517\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1541"
        },
        {
          "category": "workaround",
          "details": "The impact of this flaw may be reduced by setting strict resource limits to the stack size of processes at the operational system level. This can be achieved either through the \u0027ulimit\u0027 shell built-in or the \u0027limits.conf\u0027 file.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c"
    },
    {
      "cve": "CVE-2025-40778",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2025-10-22T15:07:23.729000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2405827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability exists in BIND\u2019s DNS resolver logic that makes it overly permissive when accepting resource records (RRs) in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache, redirecting clients to malicious domains or unauthorized servers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: Cache poisoning attacks with unsolicited RRs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "It is classified as Important rather than Critical because its impact is limited to cache poisoning within recursive resolvers and does not allow direct code execution, privilege escalation, or service disruption. The vulnerability affects the accuracy of DNS responses, but not the availability or confidentiality of systems. Additionally, DNSSEC-enabled deployments and restricted recursive access can significantly mitigate exploitation risks. Therefore, while the flaw can misdirect network traffic and compromise trust in name resolution, it does not directly compromise the underlying server or client systems, justifying an Important \u2014 but not Critical \u2014 severity rating.\n\nTechnical Analysis:\nThe issue arises because BIND fails to strictly validate unsolicited resource records accompanying legitimate DNS responses. This gap allows forged recursive resolvers to be cached as valid entries. Since the attack is remote, requires no authentication, and exploits a low-complexity vector, it is highly impactful in recursive resolver environments\u2014especially those exposed to untrusted clients or open resolvers.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-40778"
        },
        {
          "category": "external",
          "summary": "RHBZ#2405827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-40778",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-40778"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-40778",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40778"
        }
      ],
      "release_date": "2025-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-05T16:26:06+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:d517885ee59d46c2aca8be69fdcf916f78a510ae76a5a9f7875c1c5ab3cfc3c1\n\n      (For s390x architecture)\n      The image digest is sha256:3a4a7c87e8ca5f4e3803f8f203599b25055276a532df8e0b66ec4ec2ebc51f4c\n\n      (For ppc64le architecture)\n      The image digest is sha256:f34818181660a9f58a59e06dbe58f24de82dcbb688e5f940a41e62e08f1edf94\n\n      (For aarch64 architecture)\n      The image digest is sha256:24eeb2ea15ac709ed08df9b6f1a5d1ac334c4f7335c0ae5249e17298ab297517\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1541"
        },
        {
          "category": "workaround",
          "details": "While it is not possible to eliminate risk from this vulnerability, there are several options for reducing the risk. These include restricting recursive queries to trusted or internal networks only, and apply rate limiting or firewall rules to prevent excessive or repetitive requests. Enabling DNSSEC validation helps reject forged records, while isolating recursive resolvers from authoritative servers limits the impact of potential cache poisoning. Active monitoring of CPU usage, query volume, and cache anomalies can provide early warning of abuse or attacks.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: Cache poisoning attacks with unsolicited RRs"
    },
    {
      "cve": "CVE-2025-40780",
      "cwe": {
        "id": "CWE-338",
        "name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"
      },
      "discovery_date": "2025-10-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2405829"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator (PRNG). This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS responses into the resolver\u2019s cache, causing clients to receive spoofed DNS data. Authoritative servers are generally unaffected, but recursive resolvers are exposed to this risk. Exploitation is remote and does not require user interaction.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: Cache poisoning due to weak PRNG",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in BIND 9 resolvers caused by a weakness in the Pseudo Random Number Generator (PRNG) used to select the UDP source port and DNS query (transaction) ID. Exploitation requires an attacker to correctly predict both values and race the legitimate authoritative response with a spoofed packet to perform cache poisoning. While the PRNG weakness reduces entropy and makes prediction feasible under certain conditions, this still requires precise timing, on-path or spoofing capabilities, and targeting of recursive resolvers.\n\nThe impact is limited to resolver cache integrity; it does not allow remote code execution, privilege escalation, or direct compromise of the BIND server itself. Authoritative servers are not affected. Additionally, operational mitigations such as DNSSEC validation, access control restricting recursion, and network-level packet filtering reduce real-world exploitability. No active exploits have been observed in the wild.\n\nBecause exploitation is non-trivial, requires network-level spoofing and precise timing, and only affects cache integrity without server compromise, the vulnerability is considered Important rather than Critical.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-40780"
        },
        {
          "category": "external",
          "summary": "RHBZ#2405829",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405829"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-40780",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-40780"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-40780",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40780"
        }
      ],
      "release_date": "2025-10-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-05T16:26:06+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:d517885ee59d46c2aca8be69fdcf916f78a510ae76a5a9f7875c1c5ab3cfc3c1\n\n      (For s390x architecture)\n      The image digest is sha256:3a4a7c87e8ca5f4e3803f8f203599b25055276a532df8e0b66ec4ec2ebc51f4c\n\n      (For ppc64le architecture)\n      The image digest is sha256:f34818181660a9f58a59e06dbe58f24de82dcbb688e5f940a41e62e08f1edf94\n\n      (For aarch64 architecture)\n      The image digest is sha256:24eeb2ea15ac709ed08df9b6f1a5d1ac334c4f7335c0ae5249e17298ab297517\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1541"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\nTo reduce risk, restrict recursive queries to trusted or internal networks only, and apply rate limiting or firewall rules to prevent excessive or repetitive requests. Enabling DNSSEC validation helps reject forged records, while isolating recursive resolvers from authoritative servers limits the impact of potential cache poisoning. Active monitoring of CPU usage, query volume, and cache anomalies can provide early warning of abuse or attacks.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: Cache poisoning due to weak PRNG"
    },
    {
      "cve": "CVE-2025-59375",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-09-15T03:00:59.775098+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2395108"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A memory amplification vulnerability in libexpat allows attackers to trigger excessive dynamic memory allocations by submitting specially crafted XML input. A small input (~250 KiB) can cause the parser to allocate hundreds of megabytes, leading to denial-of-service (DoS) through memory exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is Important rather than Critical because, while it allows for significant resource exhaustion leading to denial-of-service (DoS), it does not enable arbitrary code execution, data leakage, or privilege escalation. The vulnerability stems from an uncontrolled memory amplification behavior in libexpat\u2019s parser, where a relatively small XML payload can cause disproportionately large heap allocations. However, the flaw is limited in scope to service disruption and requires the attacker to submit a crafted XML document\u2014something that can be mitigated with proper input validation and memory usage limits. Therefore, while the exploitability is high, the impact is confined to availability, not confidentiality or integrity, making it a high-severity but not critical flaw.\n\nIn Firefox and Thunderbird, where libexpat is a transitive userspace dependency, exploitation usually just crashes the application (app-level DoS), so it is classified as Moderate instead of Important.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
          "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-59375"
        },
        {
          "category": "external",
          "summary": "RHBZ#2395108",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395108"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-59375",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-59375"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-59375",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59375"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2025-59375",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2025-59375"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2025-59375",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2025-59375"
        }
      ],
      "release_date": "2025-09-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-02-05T16:26:06+00:00",
          "details": "For OpenShift Container Platform 4.15 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:d517885ee59d46c2aca8be69fdcf916f78a510ae76a5a9f7875c1c5ab3cfc3c1\n\n      (For s390x architecture)\n      The image digest is sha256:3a4a7c87e8ca5f4e3803f8f203599b25055276a532df8e0b66ec4ec2ebc51f4c\n\n      (For ppc64le architecture)\n      The image digest is sha256:f34818181660a9f58a59e06dbe58f24de82dcbb688e5f940a41e62e08f1edf94\n\n      (For aarch64 architecture)\n      The image digest is sha256:24eeb2ea15ac709ed08df9b6f1a5d1ac334c4f7335c0ae5249e17298ab297517\n\nAll OpenShift Container Platform 4.15 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:1541"
        },
        {
          "category": "workaround",
          "details": "To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption.",
          "product_ids": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.15:rhcos-aarch64-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-ppc64le-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-s390x-415.92.202601271320-0",
            "9Base-RHOSE-4.15:rhcos-x86_64-415.92.202601271320-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.13.64 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container\nPlatform 4.13.\n\nRed Hat Product Security has rated this update as having a security impact\nof  Low. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container\nPlatform 4.13.64. See the following advisory for the RPM packages for this\nrelease:\n\nhttps://access.redhat.com/errata/RHBA-2026:3414\n\nSpace precludes documenting all of the container images in this advisory.\nSee the following Release Notes documentation, which will be updated\nshortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nSecurity Fix(es):\n\nNone\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:3415",
        "url": "https://access.redhat.com/errata/RHSA-2026:3415"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2376219",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376219"
      },
      {
        "category": "external",
        "summary": "2396054",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2396054"
      },
      {
        "category": "external",
        "summary": "2408762",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408762"
      },
      {
        "category": "external",
        "summary": "2416741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416741"
      },
      {
        "category": "external",
        "summary": "2418711",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418711"
      },
      {
        "category": "external",
        "summary": "2430376",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3415.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.13.64 bug fix and security update",
    "tracking": {
      "current_release_date": "2026-05-19T15:23:15+00:00",
      "generator": {
        "date": "2026-05-19T15:23:15+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.0"
        }
      },
      "id": "RHSA-2026:3415",
      "initial_release_date": "2026-03-05T11:25:42+00:00",
      "revision_history": [
        {
          "date": "2026-03-05T11:25:42+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-03-05T11:25:42+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-19T15:23:15+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.13",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.13",
                  "product_id": "9Base-RHOSE-4.13",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.13::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhcos-x86_64-413.92.202602240113-0",
                "product": {
                  "name": "rhcos-x86_64-413.92.202602240113-0",
                  "product_id": "rhcos-x86_64-413.92.202602240113-0",
                  "product_identification_helper": {
                    "purl": "pkg:generic/redhat/rhcos@413.92.202602240113?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhcos-x86_64-413.92.202602240113-0 as a component of Red Hat OpenShift Container Platform 4.13",
          "product_id": "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
        },
        "product_reference": "rhcos-x86_64-413.92.202602240113-0",
        "relates_to_product_reference": "9Base-RHOSE-4.13"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5987",
      "cwe": {
        "id": "CWE-393",
        "name": "Return of Wrong Status Code"
      },
      "discovery_date": "2025-07-03T21:55:26.394000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376219"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidentiality and integrity or crashes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security Team has rated this vulnerability as having a Moderate security impact. This is due to the high complexity in exploiting this flaw. For a successful attack to take place an attacker needs to manage to exhaust the heap space to for the OpenSSL library to return the error code which wrongly match the SSH_OK return code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376219",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376219"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5987",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5987",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/security/advisories/CVE-2025-5987.txt",
          "url": "https://www.libssh.org/security/advisories/CVE-2025-5987.txt"
        }
      ],
      "release_date": "2025-04-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-05T11:25:42+00:00",
          "details": "For OpenShift Container Platform 4.13 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:a7c362225f22ef51feca9c9959409ffc5f8308a9ecc06ed2cc39b31668327eba\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:3415"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend"
    },
    {
      "cve": "CVE-2025-6176",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2025-10-31T01:00:56.408048+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2408762"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Scrapy are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of available memory. This occurs because brotli can achieve extremely high compression ratios for zero-filled data, leading to excessive memory consumption during decompression.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important for Red Hat products. The flaw in Scrapy\u0027s brotli decompression implementation allows remote attackers to trigger a denial of service by sending specially crafted brotli-compressed data. This can lead to excessive memory consumption and system instability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-6176"
        },
        {
          "category": "external",
          "summary": "RHBZ#2408762",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408762"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-6176",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-6176"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-6176",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6176"
        },
        {
          "category": "external",
          "summary": "https://huntr.com/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0",
          "url": "https://huntr.com/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0"
        }
      ],
      "release_date": "2025-10-31T00:00:21.219000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-05T11:25:42+00:00",
          "details": "For OpenShift Container Platform 4.13 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:a7c362225f22ef51feca9c9959409ffc5f8308a9ecc06ed2cc39b31668327eba\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:3415"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS"
    },
    {
      "cve": "CVE-2025-9230",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2025-09-17T12:15:34.387000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2396054"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the OpenSSL CMS implementation (RFC 3211 KEK Unwrap). This vulnerability allows memory corruption, an application level denial of service, or potential execution of attacker-supplied code via crafted CMS messages using password-based encryption (PWRI).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: Out-of-bounds read \u0026 write in RFC 3211 KEK Unwrap",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The vulnerability was rated as Moderate because, while the potential impact includes an application level denial of service and possible arbitrary code execution, successful exploitation is considered unlikely due to the high attack complexity and the fact that password-based CMS encryption (PWRI) is rarely used in real-world deployments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-9230"
        },
        {
          "category": "external",
          "summary": "RHBZ#2396054",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2396054"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-9230",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-9230"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-9230",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9230"
        }
      ],
      "release_date": "2025-09-30T23:59:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-05T11:25:42+00:00",
          "details": "For OpenShift Container Platform 4.13 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:a7c362225f22ef51feca9c9959409ffc5f8308a9ecc06ed2cc39b31668327eba\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:3415"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: Out-of-bounds read \u0026 write in RFC 3211 KEK Unwrap"
    },
    {
      "cve": "CVE-2025-13601",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2025-11-24T12:49:28.274000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glib: Integer overflow in in g_escape_uri_string()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-13601"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-13601",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-13601"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13601",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13601"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3827",
          "url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3827"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914",
          "url": "https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914"
        }
      ],
      "release_date": "2025-11-24T13:00:15.295000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-05T11:25:42+00:00",
          "details": "For OpenShift Container Platform 4.13 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:a7c362225f22ef51feca9c9959409ffc5f8308a9ecc06ed2cc39b31668327eba\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:3415"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glib: Integer overflow in in g_escape_uri_string()"
    },
    {
      "cve": "CVE-2025-15467",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-01-16T14:21:50.710000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2430376"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax (CMS) message with an oversized Initialization Vector (IV) when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated Data (AEAD) ciphers such as AES-GCM. This can lead to a crash, causing a Denial of Service (DoS), or potentially allow for remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important for Red Hat products. On Red Hat Enterprise Linux, OpenSSL is built with stack protections enabled which mitigate the risk of code execution though a denial-of-service condition remains possible. This vulnerability only affects applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers, such as Kerberos using the PKINIT plugin. OpenSSL versions 1.1.1 and 1.0.2 are not affected by this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-15467"
        },
        {
          "category": "external",
          "summary": "RHBZ#2430376",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430376"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-15467",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15467",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15467"
        }
      ],
      "release_date": "2026-01-27T14:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-05T11:25:42+00:00",
          "details": "For OpenShift Container Platform 4.13 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:a7c362225f22ef51feca9c9959409ffc5f8308a9ecc06ed2cc39b31668327eba\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:3415"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing"
    },
    {
      "cve": "CVE-2025-66293",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2025-12-03T21:00:59.956903+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2418711"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out of bounds read vulnerability has been discovered in libpng. This vulnerability is in libpng\u0027s simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng\u0027s internal state management.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libpng: LIBPNG out-of-bounds read in png_image_read_composite",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated this vulnerability as Important as it affects libpng, a widely used library for PNG image processing. The flaw is due to an out-of-bounds read in libpng\u2019s simplified API when handling specially crafted PNG images containing partial transparency and gamma correction data. Successful exploitation could result in information disclosure or cause application crashes in applications processing untrusted PNG content.\n\nFor `java-17-openjdk-headless` and `java-21-openjdk-headless`, while the affected code is present in the bundled sources, it is not exercised by these headless packages.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-66293"
        },
        {
          "category": "external",
          "summary": "RHBZ#2418711",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418711"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-66293",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-66293"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66293",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66293"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/788a624d7387a758ffd5c7ab010f1870dea753a1",
          "url": "https://github.com/pnggroup/libpng/commit/788a624d7387a758ffd5c7ab010f1870dea753a1"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/commit/a05a48b756de63e3234ea6b3b938b8f5f862484a",
          "url": "https://github.com/pnggroup/libpng/commit/a05a48b756de63e3234ea6b3b938b8f5f862484a"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/issues/764",
          "url": "https://github.com/pnggroup/libpng/issues/764"
        },
        {
          "category": "external",
          "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f",
          "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f"
        }
      ],
      "release_date": "2025-12-03T20:33:57.086000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-05T11:25:42+00:00",
          "details": "For OpenShift Container Platform 4.13 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64 architecture. The image digest may be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:a7c362225f22ef51feca9c9959409ffc5f8308a9ecc06ed2cc39b31668327eba\n\nAll OpenShift Container Platform 4.13 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:3415"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHOSE-4.13:rhcos-x86_64-413.92.202602240113-0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libpng: LIBPNG out-of-bounds read in png_image_read_composite"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libssh",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libssh fixes the following issues:\n\n- CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)\n- CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317)\n- CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)\n- CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)\n- CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)\n- CVE-2025-5351: Double free in functions exporting keys (bsc#1245312)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.0-419",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20557-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:20557-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520557-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:20557-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-August/041296.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245309",
        "url": "https://bugzilla.suse.com/1245309"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245310",
        "url": "https://bugzilla.suse.com/1245310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245311",
        "url": "https://bugzilla.suse.com/1245311"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245312",
        "url": "https://bugzilla.suse.com/1245312"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245314",
        "url": "https://bugzilla.suse.com/1245314"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245317",
        "url": "https://bugzilla.suse.com/1245317"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4877 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4877/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4878 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4878/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5318 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5318/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5351 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5351/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5372 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5372/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5987 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5987/"
      }
    ],
    "title": "Security update for libssh",
    "tracking": {
      "current_release_date": "2025-08-14T09:26:49Z",
      "generator": {
        "date": "2025-08-14T09:26:49Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:20557-1",
      "initial_release_date": "2025-08-14T09:26:49Z",
      "revision_history": [
        {
          "date": "2025-08-14T09:26:49Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-2.1.aarch64",
                "product": {
                  "name": "libssh-config-0.10.6-2.1.aarch64",
                  "product_id": "libssh-config-0.10.6-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-2.1.aarch64",
                "product": {
                  "name": "libssh4-0.10.6-2.1.aarch64",
                  "product_id": "libssh4-0.10.6-2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-2.1.s390x",
                "product": {
                  "name": "libssh-config-0.10.6-2.1.s390x",
                  "product_id": "libssh-config-0.10.6-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-2.1.s390x",
                "product": {
                  "name": "libssh4-0.10.6-2.1.s390x",
                  "product_id": "libssh4-0.10.6-2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-2.1.x86_64",
                "product": {
                  "name": "libssh-config-0.10.6-2.1.x86_64",
                  "product_id": "libssh-config-0.10.6-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-2.1.x86_64",
                "product": {
                  "name": "libssh4-0.10.6-2.1.x86_64",
                  "product_id": "libssh4-0.10.6-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.0",
                "product": {
                  "name": "SUSE Linux Micro 6.0",
                  "product_id": "SUSE Linux Micro 6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-2.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64"
        },
        "product_reference": "libssh-config-0.10.6-2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-2.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x"
        },
        "product_reference": "libssh-config-0.10.6-2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-2.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64"
        },
        "product_reference": "libssh-config-0.10.6-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-2.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64"
        },
        "product_reference": "libssh4-0.10.6-2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-2.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x"
        },
        "product_reference": "libssh4-0.10.6-2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-2.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        },
        "product_reference": "libssh4-0.10.6-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-4877",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4877"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There\u0027s a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it\u0027s possible that the program perform out of bounds write leading to a heap corruption.\nThis issue affects only 32-bits builds of libssh.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4877",
          "url": "https://www.suse.com/security/cve/CVE-2025-4877"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245309 for CVE-2025-4877",
          "url": "https://bugzilla.suse.com/1245309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4877"
    },
    {
      "cve": "CVE-2025-4878",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4878"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn\u0027t exist and may lead to possible signing failures or heap corruption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4878",
          "url": "https://www.suse.com/security/cve/CVE-2025-4878"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245310 for CVE-2025-4878",
          "url": "https://bugzilla.suse.com/1245310"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4878"
    },
    {
      "cve": "CVE-2025-5318",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5318"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5318",
          "url": "https://www.suse.com/security/cve/CVE-2025-5318"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245311 for CVE-2025-5318",
          "url": "https://bugzilla.suse.com/1245311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-5351",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5351"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5351",
          "url": "https://www.suse.com/security/cve/CVE-2025-5351"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245312 for CVE-2025-5351",
          "url": "https://bugzilla.suse.com/1245312"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5351"
    },
    {
      "cve": "CVE-2025-5372",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5372"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success-the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions\u0027 confidentiality, integrity, and availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5372",
          "url": "https://www.suse.com/security/cve/CVE-2025-5372"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245314 for CVE-2025-5372",
          "url": "https://bugzilla.suse.com/1245314"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-5372"
    },
    {
      "cve": "CVE-2025-5987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidentiality and integrity or crashes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5987",
          "url": "https://www.suse.com/security/cve/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245317 for CVE-2025-5987",
          "url": "https://bugzilla.suse.com/1245317"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5987"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libssh",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libssh fixes the following issues:\n\n- CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)\n- CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317)\n- CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)\n- CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)\n- CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)\n- CVE-2025-5351: Double free in functions exporting keys (bsc#1245312)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-213",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20596-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:20596-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520596-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:20596-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022366.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245309",
        "url": "https://bugzilla.suse.com/1245309"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245310",
        "url": "https://bugzilla.suse.com/1245310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245311",
        "url": "https://bugzilla.suse.com/1245311"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245312",
        "url": "https://bugzilla.suse.com/1245312"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245314",
        "url": "https://bugzilla.suse.com/1245314"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245317",
        "url": "https://bugzilla.suse.com/1245317"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4877 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4877/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4878 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4878/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5318 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5318/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5351 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5351/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5372 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5372/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5987 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5987/"
      }
    ],
    "title": "Security update for libssh",
    "tracking": {
      "current_release_date": "2025-08-14T10:14:25Z",
      "generator": {
        "date": "2025-08-14T10:14:25Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:20596-1",
      "initial_release_date": "2025-08-14T10:14:25Z",
      "revision_history": [
        {
          "date": "2025-08-14T10:14:25Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
                "product": {
                  "name": "libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
                  "product_id": "libssh-config-0.10.6-slfo.1.1_2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-slfo.1.1_2.1.aarch64",
                "product": {
                  "name": "libssh4-0.10.6-slfo.1.1_2.1.aarch64",
                  "product_id": "libssh4-0.10.6-slfo.1.1_2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
                "product": {
                  "name": "libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
                  "product_id": "libssh-config-0.10.6-slfo.1.1_2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
                "product": {
                  "name": "libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
                  "product_id": "libssh4-0.10.6-slfo.1.1_2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-slfo.1.1_2.1.s390x",
                "product": {
                  "name": "libssh-config-0.10.6-slfo.1.1_2.1.s390x",
                  "product_id": "libssh-config-0.10.6-slfo.1.1_2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-slfo.1.1_2.1.s390x",
                "product": {
                  "name": "libssh4-0.10.6-slfo.1.1_2.1.s390x",
                  "product_id": "libssh4-0.10.6-slfo.1.1_2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
                "product": {
                  "name": "libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
                  "product_id": "libssh-config-0.10.6-slfo.1.1_2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-slfo.1.1_2.1.x86_64",
                "product": {
                  "name": "libssh4-0.10.6-slfo.1.1_2.1.x86_64",
                  "product_id": "libssh4-0.10.6-slfo.1.1_2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-slfo.1.1_2.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64"
        },
        "product_reference": "libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-slfo.1.1_2.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le"
        },
        "product_reference": "libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-slfo.1.1_2.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x"
        },
        "product_reference": "libssh-config-0.10.6-slfo.1.1_2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-slfo.1.1_2.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64"
        },
        "product_reference": "libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-slfo.1.1_2.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64"
        },
        "product_reference": "libssh4-0.10.6-slfo.1.1_2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-slfo.1.1_2.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le"
        },
        "product_reference": "libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-slfo.1.1_2.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x"
        },
        "product_reference": "libssh4-0.10.6-slfo.1.1_2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-slfo.1.1_2.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        },
        "product_reference": "libssh4-0.10.6-slfo.1.1_2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-4877",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4877"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There\u0027s a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it\u0027s possible that the program perform out of bounds write leading to a heap corruption.\nThis issue affects only 32-bits builds of libssh.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4877",
          "url": "https://www.suse.com/security/cve/CVE-2025-4877"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245309 for CVE-2025-4877",
          "url": "https://bugzilla.suse.com/1245309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4877"
    },
    {
      "cve": "CVE-2025-4878",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4878"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn\u0027t exist and may lead to possible signing failures or heap corruption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4878",
          "url": "https://www.suse.com/security/cve/CVE-2025-4878"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245310 for CVE-2025-4878",
          "url": "https://bugzilla.suse.com/1245310"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4878"
    },
    {
      "cve": "CVE-2025-5318",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5318"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5318",
          "url": "https://www.suse.com/security/cve/CVE-2025-5318"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245311 for CVE-2025-5318",
          "url": "https://bugzilla.suse.com/1245311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-5351",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5351"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5351",
          "url": "https://www.suse.com/security/cve/CVE-2025-5351"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245312 for CVE-2025-5351",
          "url": "https://bugzilla.suse.com/1245312"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5351"
    },
    {
      "cve": "CVE-2025-5372",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5372"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success-the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions\u0027 confidentiality, integrity, and availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5372",
          "url": "https://www.suse.com/security/cve/CVE-2025-5372"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245314 for CVE-2025-5372",
          "url": "https://bugzilla.suse.com/1245314"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-5372"
    },
    {
      "cve": "CVE-2025-5987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidentiality and integrity or crashes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5987",
          "url": "https://www.suse.com/security/cve/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245317 for CVE-2025-5987",
          "url": "https://bugzilla.suse.com/1245317"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5987"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "libssh ist eine C Bibliothek f\u00fcr das Anbieten von SSH Diensten auf Client- und Serverseite. Sie kann genutzt werden, um aus der Ferne Programme auszuf\u00fchren, Dateien zu \u00fcbertragen oder als sicherer und transparenter Tunnel f\u00fcr entfernte Programme genutzt werden.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in libssh ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen, und potentiell weitere nicht spezifizierte Auswirkungen zu verursachen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1423 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1423.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1423 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1423"
      },
      {
        "category": "external",
        "summary": "libssh. org vom 2025-06-29",
        "url": "https://www.libssh.org/2025/06/24/libssh-0-11-2-security-and-bugfix-release/"
      },
      {
        "category": "external",
        "summary": "libssh security and bugfix release vom 2025-06-29",
        "url": "https://seclists.org/oss-sec/2025/q2/284"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02229-1 vom 2025-07-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021759.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7619-1 vom 2025-07-07",
        "url": "https://ubuntu.com/security/notices/USN-7619-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02281-1 vom 2025-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021789.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02279-1 vom 2025-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021791.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02278-1 vom 2025-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021792.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2025-18E8506D3A vom 2025-07-22",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-18e8506d3a"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02755-1 vom 2025-08-12",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022132.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7696-1 vom 2025-08-19",
        "url": "https://ubuntu.com/security/notices/USN-7696-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20557-1 vom 2025-08-19",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022231.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20596-1 vom 2025-08-29",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022366.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7246875 vom 2025-10-01",
        "url": "https://www.ibm.com/support/pages/node/7246875"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:18231 vom 2025-10-16",
        "url": "https://access.redhat.com/errata/RHSA-2025:18231"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-18275 vom 2025-10-17",
        "url": "https://linux.oracle.com/errata/ELSA-2025-18275.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:18275 vom 2025-10-18",
        "url": "https://errata.build.resf.org/RLSA-2025:18275"
      },
      {
        "category": "external",
        "summary": "RedHat Security Advisory",
        "url": "https://access.redhat.com/errata/RHSA-2025:18286"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:18231 vom 2025-10-18",
        "url": "https://errata.build.resf.org/RLSA-2025:18231"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-404 vom 2025-10-31",
        "url": "https://www.dell.com/support/kbdoc/000385435"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19401 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19401"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19400 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19400"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19470 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19470"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19472 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19472"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-390 vom 2025-11-05",
        "url": "https://www.dell.com/support/kbdoc/000385230"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19300 vom 2025-11-05",
        "url": "https://access.redhat.com/errata/RHSA-2025:19300"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19313 vom 2025-11-05",
        "url": "https://access.redhat.com/errata/RHSA-2025:19313"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19807 vom 2025-11-08",
        "url": "https://access.redhat.com/errata/RHSA-2025:19807"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:21013 vom 2025-11-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:21013"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:20943 vom 2025-11-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:20943"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:21977 vom 2025-11-24",
        "url": "https://access.redhat.com/errata/RHSA-2025:21977"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:21977 vom 2025-11-25",
        "url": "https://errata.build.resf.org/RLSA-2025:21977"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-21977 vom 2025-11-25",
        "url": "https://linux.oracle.com/errata/ELSA-2025-21977.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:21829 vom 2025-11-27",
        "url": "https://access.redhat.com/errata/RHSA-2025:21829"
      },
      {
        "category": "external",
        "summary": "Meinberg Security Advisory MBGSA-2025.05 vom 2025-11-27",
        "url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2025-05-lantime-firmware-v7-08-025.htm"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:18286 vom 2025-11-28",
        "url": "https://errata.build.resf.org/RLSA-2025:18286"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20251128-0005 vom 2025-11-28",
        "url": "https://security.netapp.com/advisory/NTAP-20251128-0005"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-21013 vom 2025-12-04",
        "url": "https://linux.oracle.com/errata/ELSA-2025-21013.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23024 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23024"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23484 vom 2025-12-18",
        "url": "https://access.redhat.com/errata/RHSA-2025:23484"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7255154 vom 2025-12-17",
        "url": "https://www.ibm.com/support/pages/node/7255154"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23484 vom 2025-12-18",
        "url": "https://linux.oracle.com/errata/ELSA-2025-23484.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23484 vom 2025-12-18",
        "url": "https://errata.build.resf.org/RLSA-2025:23484"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23483 vom 2025-12-18",
        "url": "https://access.redhat.com/errata/RHSA-2025:23483"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23483 vom 2025-12-18",
        "url": "https://linux.oracle.com/errata/ELSA-2025-23483.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23483 vom 2025-12-19",
        "url": "https://errata.build.resf.org/RLSA-2025:23483"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7256201 vom 2026-01-05",
        "url": "https://www.ibm.com/support/pages/node/7256201"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0431 vom 2026-01-12",
        "url": "https://access.redhat.com/errata/RHSA-2026:0431"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0428 vom 2026-01-12",
        "url": "https://access.redhat.com/errata/RHSA-2026:0428"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0430 vom 2026-01-12",
        "url": "https://access.redhat.com/errata/RHSA-2026:0430"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0427 vom 2026-01-12",
        "url": "https://access.redhat.com/errata/RHSA-2026:0427"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0934 vom 2026-01-22",
        "url": "https://access.redhat.com/errata/RHSA-2026:0934"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0950 vom 2026-01-22",
        "url": "https://access.redhat.com/errata/RHSA-2026:0950"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0702 vom 2026-01-22",
        "url": "https://access.redhat.com/errata/RHSA-2026:0702"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0978 vom 2026-01-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:0978"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0996 vom 2026-01-30",
        "url": "https://access.redhat.com/errata/RHSA-2026:0996"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0985 vom 2026-01-30",
        "url": "https://access.redhat.com/errata/RHSA-2026:0985"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0980 vom 2026-02-03",
        "url": "https://access.redhat.com/errata/RHSA-2026:0980"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:1539 vom 2026-02-04",
        "url": "https://access.redhat.com/errata/RHSA-2026:1539"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:1541 vom 2026-02-05",
        "url": "https://access.redhat.com/errata/RHSA-2026:1541"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:3461 vom 2026-02-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:3461"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:3462 vom 2026-02-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:3462"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:3415 vom 2026-03-05",
        "url": "https://access.redhat.com/errata/RHSA-2026:3415"
      }
    ],
    "source_lang": "en-US",
    "title": "libssh: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-03-04T23:00:00.000+00:00",
      "generator": {
        "date": "2026-03-05T11:42:16.523+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1423",
      "initial_release_date": "2025-06-29T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-06-29T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-07-06T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-07-07T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2025-07-10T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-07-21T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2025-07-22T22:00:00.000+00:00",
          "number": "6",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-22335"
        },
        {
          "date": "2025-08-11T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-08-19T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Ubuntu und SUSE aufgenommen"
        },
        {
          "date": "2025-08-31T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-10-01T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-10-15T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-16T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2025-10-19T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen"
        },
        {
          "date": "2025-10-30T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-11-02T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-04T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-11-05T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-09T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-11T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-24T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-25T23:00:00.000+00:00",
          "number": "21",
          "summary": "doppelter Eintrag entfernt"
        },
        {
          "date": "2025-11-26T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-27T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Meinberg aufgenommen"
        },
        {
          "date": "2025-12-03T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2025-12-09T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-12-17T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Red Hat, IBM und Oracle Linux aufgenommen"
        },
        {
          "date": "2025-12-18T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-01-04T23:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2026-01-11T23:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-01-12T23:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-01-21T23:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-01-22T23:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-01-27T23:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-02-01T23:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-02-03T23:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-02-04T23:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-02-05T23:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-03-01T23:00:00.000+00:00",
          "number": "38",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-03-04T23:00:00.000+00:00",
          "number": "39",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "39"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell Avamar",
            "product": {
              "name": "Dell Avamar",
              "product_id": "T039664",
              "product_identification_helper": {
                "cpe": "cpe:/a:dell:avamar:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Virtual Edition",
                "product": {
                  "name": "Dell NetWorker Virtual Edition",
                  "product_id": "T048226",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:virtual_edition"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Appliance \u003c5.32.00.18",
                "product": {
                  "name": "Dell Secure Connect Gateway Appliance \u003c5.32.00.18",
                  "product_id": "T048301"
                }
              },
              {
                "category": "product_version",
                "name": "Appliance 5.32.00.18",
                "product": {
                  "name": "Dell Secure Connect Gateway Appliance 5.32.00.18",
                  "product_id": "T048301-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:secure_connect_gateway:appliance__5.32.00.18"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Secure Connect Gateway"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c12.16.0",
                "product": {
                  "name": "IBM App Connect Enterprise \u003c12.16.0",
                  "product_id": "T047348"
                }
              },
              {
                "category": "product_version",
                "name": "12.16.0",
                "product": {
                  "name": "IBM App Connect Enterprise 12.16.0",
                  "product_id": "T047348-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:app_connect_enterprise:12.16.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c12.0.16",
                "product": {
                  "name": "IBM App Connect Enterprise \u003c12.0.16",
                  "product_id": "T047349"
                }
              },
              {
                "category": "product_version",
                "name": "12.0.16",
                "product": {
                  "name": "IBM App Connect Enterprise 12.0.16",
                  "product_id": "T047349-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:app_connect_enterprise:12.0.16"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "App Connect Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.5.0 UP14 IF03",
                "product": {
                  "name": "IBM QRadar SIEM \u003c7.5.0 UP14 IF03",
                  "product_id": "T049499"
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0 UP14 IF03",
                "product": {
                  "name": "IBM QRadar SIEM 7.5.0 UP14 IF03",
                  "product_id": "T049499-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up14_if03"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c10.0.9.1",
                "product": {
                  "name": "IBM Security Verify Access \u003c10.0.9.1",
                  "product_id": "T049459"
                }
              },
              {
                "category": "product_version",
                "name": "10.0.9.1",
                "product": {
                  "name": "IBM Security Verify Access 10.0.9.1",
                  "product_id": "T049459-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:security_verify_access:v10.0.9.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Security Verify Access"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.08.025",
                "product": {
                  "name": "Meinberg LANTIME \u003c7.08.025",
                  "product_id": "T048944"
                }
              },
              {
                "category": "product_version",
                "name": "7.08.025",
                "product": {
                  "name": "Meinberg LANTIME 7.08.025",
                  "product_id": "T048944-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:7.08.025"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "LANTIME"
          }
        ],
        "category": "vendor",
        "name": "Meinberg"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Baseboard Management Controller",
                "product": {
                  "name": "NetApp AFF Baseboard Management Controller",
                  "product_id": "T025086",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:netapp:aff:::baseboard_management_controller"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "AFF"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "for VMware vSphere",
                "product": {
                  "name": "NetApp ActiveIQ Unified Manager for VMware vSphere",
                  "product_id": "T025152",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "ActiveIQ Unified Manager"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Baseboard Management Controller",
                "product": {
                  "name": "NetApp FAS Baseboard Management Controller",
                  "product_id": "T043535",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:netapp:fas:baseboard_management_controller"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FAS"
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c0.11.2",
                "product": {
                  "name": "Open Source libssh \u003c0.11.2",
                  "product_id": "T044955"
                }
              },
              {
                "category": "product_version",
                "name": "0.11.2",
                "product": {
                  "name": "Open Source libssh 0.11.2",
                  "product_id": "T044955-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:libssh:libssh:0.11.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "libssh"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux",
                "product": {
                  "name": "Red Hat Enterprise Linux",
                  "product_id": "67646",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux",
                "product": {
                  "name": "Red Hat Enterprise Linux",
                  "product_id": "T037727",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.17.43",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.17.43",
                  "product_id": "T048318"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.17.43",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.17.43",
                  "product_id": "T048318-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.17.43"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.20.12",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.20.12",
                  "product_id": "T050329"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.20.12",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.20.12",
                  "product_id": "T050329-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.20.12"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenShift"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-4877",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-4877"
    },
    {
      "cve": "CVE-2025-5351",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-5351"
    },
    {
      "cve": "CVE-2025-5449",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-5449"
    },
    {
      "cve": "CVE-2025-4878",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-4878"
    },
    {
      "cve": "CVE-2025-5318",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-5372",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-5372"
    },
    {
      "cve": "CVE-2025-5987",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-5987"
    }
  ]
}